check if admin or super admin
get permissions script