diff --git a/media/css/seahub.css b/media/css/seahub.css
index b1a1ff7379..9d1068e75e 100644
--- a/media/css/seahub.css
+++ b/media/css/seahub.css
@@ -3225,13 +3225,14 @@ textarea:-moz-placeholder {/* for FF */
     margin-left:3.5em;
 }
 #myhome-enable-mods,
-#enable-mods,
+#enable-mods {
+    margin-top:3px;
+    cursor:pointer;
+}
 #edit-index {
     color:#d7d7d7;
     margin-top:3px;
 }
-#myhome-enable-mods:hover,
-#enable-mods:hover,
 #edit-index:hover {
     color:#666;
     cursor:pointer;
diff --git a/seahub/templates/js/templates.html b/seahub/templates/js/templates.html
index 311072cc15..95df526e9e 100644
--- a/seahub/templates/js/templates.html
+++ b/seahub/templates/js/templates.html
@@ -456,7 +456,9 @@
 <script type="text/template" id="myhome-side-nav-tmpl">
     <div class="hd w100 ovhd">
         <h3 class="fleft">{% trans "Personal" %}</h3>
+        <% if (can_add_repo) { %>
         <img id="myhome-enable-mods" class="fright" title="{% trans "Enable Modules" %}" src="{{MEDIA_URL}}img/setting.png" alt="" />
+        <% } %>
     </div>
     <ul class="side-tabnav-tabs">
         <li class="tab tab-cur"><a href="{{ SITE_ROOT }}#my-libs/" class="lib">{% trans "Libraries" %}</a></li>
@@ -479,8 +481,10 @@
 
     <h3 class="hd">{% trans "Share Admin" %}</h3>
     <ul class="side-tabnav-tabs">
+        <% if (can_add_repo) { %>
         <li class="tab"><a href="{{ SITE_ROOT }}share/" class="lib">{% trans "Libraries" %}</a></li>
         <li class="tab"><a href="{{ SITE_ROOT }}share/folders/" class="folders">{% trans "Folders" %}</a></li>
+        <% } %>
         <li class="tab"><a href="{{ SITE_ROOT }}share/files/" class="files">{% trans "Files" %}</a></li>
         <li class="tab"><a href="{{ SITE_ROOT }}share/links/" class="links">{% trans "Links" %}</a></li>
     </ul>
diff --git a/seahub/templates/libraries.html b/seahub/templates/libraries.html
index 6afd4de72f..657dc7187d 100644
--- a/seahub/templates/libraries.html
+++ b/seahub/templates/libraries.html
@@ -25,7 +25,7 @@
 {% block left_panel %}
 <div class="side-tabnav hide" id="myhome-side-nav">
 </div>
-<div class="side-tabnav hide" id="grp-side-nav">
+<div class="side-tabnav hide" id="group-side-nav">
 </div>
 <div class="side-tabnav hide" id="org-side-nav">
     <h3 class="hd">{% trans "Organization" %}</h3>
@@ -248,6 +248,7 @@ app["pageOptions"] = {
     })(),
     username: "{{request.user.username}}",
     events_enabled: {% if events_enabled %} true {% else %} false {% endif %},
+    can_add_repo: {% if user.permissions.can_add_repo %} true {% else %} false {% endif %},
     is_staff: {% if request.user.is_staff %} true {% else %} false {% endif %},
     repo_password_min_length: {{ repo_password_min_length }},
     enable_upload_folder: {% if enable_upload_folder %} true {% else %} false {% endif %},
diff --git a/seahub/views/ajax.py b/seahub/views/ajax.py
index ac11b10338..1250ba87f1 100644
--- a/seahub/views/ajax.py
+++ b/seahub/views/ajax.py
@@ -2482,9 +2482,8 @@ def toggle_group_modules(request, group_id):
     else:
         disable_mod_for_group(group.id, MOD_GROUP_WIKI)
 
-    return HttpResponse(json.dumps({
-        "success": True
-        }), content_type=content_type)
+    return HttpResponse(json.dumps({ "success": True }),
+            content_type=content_type)
 
 @login_required_ajax
 def toggle_personal_modules(request):
@@ -2492,6 +2491,11 @@ def toggle_personal_modules(request):
     content_type = 'application/json; charset=utf-8'
     result = {}
 
+    if not request.user.permissions.can_add_repo:
+        result["error"] = _('Permission denied.')
+        return HttpResponse(json.dumps(result),
+                            status=403, content_type=content_type)
+
     username = request.user.username
     personal_wiki = request.POST.get('personal_wiki', '')
     if personal_wiki == 'true':
@@ -2499,5 +2503,5 @@ def toggle_personal_modules(request):
     else:
         disable_mod_for_user(username, MOD_PERSONAL_WIKI)
 
-    return HttpResponse(json.dumps({ "success": True
-            }), content_type=content_type)
+    return HttpResponse(json.dumps({ "success": True }),
+            content_type=content_type)
diff --git a/static/scripts/app/views/group-side-nav.js b/static/scripts/app/views/group-side-nav.js
index 1a1037aba8..5a7e82773d 100644
--- a/static/scripts/app/views/group-side-nav.js
+++ b/static/scripts/app/views/group-side-nav.js
@@ -7,7 +7,7 @@ define([
     'use strict';
 
     var GroupSideNavView = Backbone.View.extend({
-        el: '#grp-side-nav',
+        el: '#group-side-nav',
 
         template: _.template($("#group-side-nav-tmpl").html()),
         enableModTemplate: _.template($("#group-mods-enable-form-tmpl").html()),
@@ -70,7 +70,7 @@ define([
                     form_id: form.attr('id'),
                     post_url: Common.getUrl({
                         'name': 'toggle_group_modules',
-                        'group_id': _this.group_id,
+                        'group_id': _this.group_id
                     }),
                     post_data: {'group_wiki': cur_checked },
                     after_op_success: function () {
diff --git a/static/scripts/app/views/myhome-side-nav.js b/static/scripts/app/views/myhome-side-nav.js
index 3619fa62d7..ba9f22c8ac 100644
--- a/static/scripts/app/views/myhome-side-nav.js
+++ b/static/scripts/app/views/myhome-side-nav.js
@@ -19,6 +19,7 @@ define([
         render: function() {
             this.$el.html(this.template({
                 'mods_enabled': app.pageOptions.user_mods_enabled,
+                'can_add_repo': app.pageOptions.can_add_repo,
                 'events_enabled': app.pageOptions.events_enabled
             }));
         },
@@ -28,11 +29,11 @@ define([
         },
 
         enableMods: function () {
+            var mods_enabled = app.pageOptions.user_mods_enabled;
             var form = $(this.enableModTemplate({
                     'mods_available': app.pageOptions.user_mods_available,
-                    'mods_enabled': app.pageOptions.user_mods_enabled
+                    'mods_enabled': mods_enabled
                 }));
-
             form.modal();
             $('#simplemodal-container').css('height', 'auto');
 
@@ -43,7 +44,6 @@ define([
             var checkbox = $('[name="personal_wiki"]'),
                 original_checked = checkbox.prop('checked'),
                _this = this;
-
             form.submit(function() {
                 var cur_checked = checkbox.prop('checked');
                 if (cur_checked == original_checked) {
@@ -53,18 +53,16 @@ define([
                     form: form,
                     form_id: form.attr('id'),
                     post_url: Common.getUrl({
-                        'name': 'toggle_personal_modules',
+                        'name': 'toggle_personal_modules'
                     }),
                     post_data: {'personal_wiki': cur_checked },
                     after_op_success: function () {
                         if (cur_checked) {
-                            // enable personal wiki
-                            app.pageOptions.user_mods_enabled.push('personal wiki');
+                            mods_enabled.push('personal wiki');
                         } else {
-                            // disable personal wiki
-                            var index = app.pageOptions.user_mods_enabled.indexOf('personal wiki');
+                            var index = mods_enabled.indexOf('personal wiki');
                             if (index > -1) {
-                                app.pageOptions.user_mods_enabled.splice(index, 1);
+                                mods_enabled.splice(index, 1); // rm the item
                             }
                         }
                         $.modal.close();