fix admin permissions