hide parent manipulation controlls if user lacks permission