refs #18 hide menu depend on role permissions