checkadmin + checkassist working and all access restricted