add permission "locker.admin"