updated permissions on toppanel.jsp(#156)(#150)