add download privilige only when admin