only show "arrived" button if user has rights for it

fixes #172