check permission in show