permission admin

hopefully this is the final commit