added full permissions for web admin