remove security breach in setting admin rights