dashboard: check module ACL