fix bug & add privileges in admin menu