add admin see all cases, staff can just see their own cases