adding permissions for viewing / editing the staff profiles