fix manager role permissions