add acl checks in tabs' cog icon