feature/456: permissions fixed

now only admins has feautre creation permission