updated for manage staff permissions