updated superuser role constant and property
added scopes and permission check methods
fixed beforeSave permission check (use original values)