implement permission "locker.admin"