only show authorized menu items