shouldn't we just hide the link if you don't have permission?