use bulk_download permission when disabling download links