ended up going jquery route for permission issue from js on href string