+ console
* prevent hack admin role
* define admin rights by role field