Restrict access to menu items based on authorization