conclusions: fix select_MS perms for admin.