fixed nav permissioning