more patches for 3.0;
remove permissions for main domain from other domain admins