use 'anon' when checking menu access