changed the access permissions for users and admins