authorisation for supervisor homepage