disable admin-granting priveleges to common users