added permission check for "UP" link