check permissions when rendering root nav