Fixed permissions for jobs.* and added jobs.admin convenience permission