updated admin and permission rules