respect permissions in sidebar