[v3.4] #966 fix default user / admin permissions

resolves #966 on `release-v3.4`
Hmm, I don't like it. We should either indent this block or unindent the larger one right above it (to make it consistent). Personally, I think it's more readable indented, but I do understand `case` is different from most blocks requiring indentation..