fixed isAdminOrEditor roles both in front and backend