add menu permissions to vendor page...