added some rules for admin and user