Fix sysop's change-rating permission