(feature) replace admin check with permissions

Everywhere we check admin permissions on the backend, we need to feature flag check the new permissions flags