allow app_dev to everyone