prevent shop from viewing and changing permissions that they dont have