fixed attributeset var

switched over to using rights.admin instead of just admin