+ add support for restricting menu links by permissions