link to manage if current user have permission