Fix protection to work on /show