allow all staff users to have all permissions