ability class to handle permissions of admin