diff --git a/.github/workflows/deploy.yaml b/.github/workflows/deploy.yaml
index 9ae8640..3a7509d 100644
--- a/.github/workflows/deploy.yaml
+++ b/.github/workflows/deploy.yaml
@@ -14,35 +14,6 @@ jobs:
       - name: Checkout code
         uses: actions/checkout@v4
 
-      - name: Compress repository
-        run: |
-          BACKUP_FILE="repo-backup-$(date +%Y%m%d-%H%M%S).tar.gz"
-          tar -czf "../$BACKUP_FILE" \
-            --exclude='.git' \
-            --exclude='node_modules' \
-            --exclude='__pycache__' \
-            --exclude='*.pyc' \
-            --exclude='db.sqlite3' \
-            --exclude='.env*' \
-            . && mv "../$BACKUP_FILE" . || true
-
-      - name: Send compressed repo via email
-        uses: dawidd6/action-send-mail@v3
-        with:
-          server_address: smtp.gmail.com
-          server_port: 587
-          username: ftp.notif.manager@gmail.com
-          password: ldufbjmidlsosmgq
-          subject: "Repository Backup - ${{ github.repository }} - ${{ github.sha }}"
-          to: byeto.net@gmail.com
-          from: ftp.notif.manager@gmail.com
-          body: |
-            Repository backup from push to ${{ github.ref }}
-            Commit: ${{ github.sha }}
-            Author: ${{ github.actor }}
-            Message: ${{ github.event.head_commit.message }}
-            Time: ${{ github.event.head_commit.timestamp }}
-          attachments: "*.tar.gz"
 
       - name: Copy files to server
         uses: appleboy/scp-action@v0.1.6
diff --git a/backend/account/admin.py b/backend/account/admin.py
index 58bdd9a..d69d297 100644
--- a/backend/account/admin.py
+++ b/backend/account/admin.py
@@ -56,7 +56,7 @@ class UserAdmin(BaseUserAdmin, UserAdminPermission, ModelAdmin, ImportExportMode
         ('اطلاعات ارتباطی', {'fields': ('phone', 'email'), }),
         ('دسترسی های وبسایت', {
          'fields': ('is_superuser', 'is_staff', 'video_uploader'), }),
-        ('گروه ها و مجوزها', {'fields': ('groups', 'user_permissions',)}),
+        ('گروه ها و مجوزها', {'fields': ('groups', 'user_permissions', 'password')}),
 
     )
     empty_value_display = 'ثبت نشده'
diff --git a/backend/account/permissions.py b/backend/account/permissions.py
index d32a37f..b4258b5 100644
--- a/backend/account/permissions.py
+++ b/backend/account/permissions.py
@@ -3,7 +3,7 @@ class UserAdminPermission:
         return request.user.is_superuser
     
     def has_view_permission(self, request, obj=None):
-        return True 
+        return request.user.is_superuser
     
     def has_change_permission(self, request, obj=None):
         return request.user.is_superuser
diff --git a/backend/core/settings/unfold_conf.py b/backend/core/settings/unfold_conf.py
index 844b197..4d8d34b 100644
--- a/backend/core/settings/unfold_conf.py
+++ b/backend/core/settings/unfold_conf.py
@@ -248,6 +248,7 @@ UNFOLD = {
                         "title": _("کاربران"),
                         "icon": "person",  
                         "link": reverse_lazy("admin:account_user_changelist"),
+                        "permission": lambda request: request.user.is_superuser,
                     },
                     {
                         "title": "گروه‌های دسترسی",
diff --git a/backend/product/admin.py b/backend/product/admin.py
index 71944a7..94fab0b 100644
--- a/backend/product/admin.py
+++ b/backend/product/admin.py
@@ -446,6 +446,9 @@ class SubCategoryModelAdmin(ModelAdmin, ImportExportModelAdmin):
         }
     }
 
+    def has_view_permission(self, request, obj = ...):
+        return True
+
 @admin.register(CommentModel)
 class CommentAdmin(ModelAdmin, ImportExportModelAdmin):
     import_form_class = ImportForm