admin user can give admin permission, fix brand id bug