administrator and editor can access everything