show sidebar items based on permissions