diff --git a/ayanova/devdocs/todo.txt b/ayanova/devdocs/todo.txt
index 03d24446..309f0642 100644
--- a/ayanova/devdocs/todo.txt
+++ b/ayanova/devdocs/todo.txt
@@ -7,9 +7,6 @@ MISC ITEMS THAT CAME UP
 
 
 
-	
-todo: sample headoffice user can't login
-
 todo: No roles defined Users can login
 	Customer user with no roles can login and gets a CSR list screen
 	regular user with no roles can login and gets the evaluation screen 
diff --git a/ayanova/src/api/biz-role-rights.js b/ayanova/src/api/biz-role-rights.js
index f8519efa..419e819d 100644
--- a/ayanova/src/api/biz-role-rights.js
+++ b/ayanova/src/api/biz-role-rights.js
@@ -24,8 +24,8 @@ export default {
   Unit: { Change: 33098, ReadFullRecord: 65669, Select: 131071 },
   UnitModel: { Change: 33098, ReadFullRecord: 65669, Select: 131071 },
   Vendor: { Change: 33098, ReadFullRecord: 65669, Select: 131071 },
-  WorkOrder: { Change: 1354, ReadFullRecord: 98949, Select: 131071 },
-  WorkOrderItem: { Change: 1354, ReadFullRecord: 98949, Select: 131071 },
+  WorkOrder: { Change: 1354, ReadFullRecord: 105093, Select: 131071 },
+  WorkOrderItem: { Change: 1354, ReadFullRecord: 105093, Select: 131071 },
   WorkOrderItemExpense: { Change: 1354, ReadFullRecord: 98949, Select: 131071 },
   WorkOrderItemLabor: { Change: 1354, ReadFullRecord: 98949, Select: 131071 },
   WorkOrderItemLoan: { Change: 1354, ReadFullRecord: 98949, Select: 131071 },
diff --git a/ayanova/src/api/initialize.js b/ayanova/src/api/initialize.js
index f87c46f7..0fba3467 100644
--- a/ayanova/src/api/initialize.js
+++ b/ayanova/src/api/initialize.js
@@ -62,20 +62,24 @@ function initNavPanel() {
     });
 
     //CSR LIST subitem
-    sub.push({
-      title: "CustomerServiceRequestList",
-      icon: "$ayiConciergeBell",
-      route: "/customer-csr-list",
-      key: key++
-    });
+    if (window.$gz.role.canOpen(window.$gz.type.CustomerServiceRequest)) {
+      sub.push({
+        title: "CustomerServiceRequestList",
+        icon: "$ayiConciergeBell",
+        route: "/customer-csr-list",
+        key: key++
+      });
+    }
 
     //WORKORDERS subitem
-    sub.push({
-      title: "WorkOrderList",
-      icon: "$ayiTools",
-      route: "/customer-workorders",
-      key: key++
-    });
+    if (window.$gz.role.canOpen(window.$gz.type.WorkOrder)) {
+      sub.push({
+        title: "WorkOrderList",
+        icon: "$ayiTools",
+        route: "/customer-workorders",
+        key: key++
+      });
+    }
 
     //** CUSTOMER LOGIN HOME (TOP)