bugfix, permissions to create reviews