add userHasPermission method to cluster
refactor of the cluster index route