allow vendor_irsc_util self:capability sys_admin;