adding access denied and hiding submit link