I would write this sentence like: 'Only allow request if the user has the right permission, or is an admin.'