security: menus, access right, and scripts sh