[support] block visibility based on role AND path