security-proxy - default access for ROLE_ADMINISTRATOR