set permission to user, if not admin, can not access admin region