add permissions on say and implement admin list