restrict user permission
add profile menu button