added catalog menus.  created middleware to enforce can_view permissions