fix access permission to admin page