ip only displayed for user who has permission