admin has authorization for all require_correct_user settings