remove staff permissions