This seems a really bad way to make a sysadmin - we should always go via the logic functions so ckan sets things up correctly