is it popssible to add permission only for admin/owner