main menu uses the defined (replacable) authorization strategy to determine whether a linkitem should be shown