ticket:14 add only superuser access