allow non admin see show page