Use os_access_admin instead of boxes_access_admin, and add "administer widgets" permission.
Add general permission.