edited rights to controller / visibility of admin dropdown