user's permission "admin" can do anything at app's index page.