removed grantAccess method, added user object in AdminController, now access check is being done directly using user object