simplify the check for superuser/staffuser