prevent user view management.html directoy