fix so permission is view hello world rather than administer hello
world.