[changed] added permissions for nav