Incorrect User Permissions in Admin Panel

Users are able to access admin features without proper permissions, fixing role-based access control issues.