Fixed admin permissions not being applied properly with is_allowed_for (both backend/frontend)