added some more parentheses to have correct logic about what a subsite
administrator can see