filter nav and dahsboard by permission