Consider user permissions when rendering the admin UI