fix permissions for admin role