restrict actions on TopicsController based on permission to hide links