page protect 1.1
correct haspermission check