prevent demo accounts from changing their own permissions