ALM-282 fixed small permission issues for staff role