Fixed admin permissions when using is_allowed_for

is_allowed_for was never checking admin permissions, the only reason it worked for some users was because of a bug. Updating front-end only still resulted in the same problem on the backend so I fixed both spots.