add restriction permits to admin