fixed staff page permissions