correct mistake in capability setting (PROHIBIT on the 'my' page)