create administrate permissions
redirect user if he should not be on collaborator page