settings permissions
check user rule in route change