fix security for receptionist role