fixed: subsite admins could access translation_editor