menu structuring with roles and permission