diff --git a/perms/mutationReducer.js b/perms/mutationReducer.js
index f8bd76c90..2e8718ed1 100644
--- a/perms/mutationReducer.js
+++ b/perms/mutationReducer.js
@@ -9,24 +9,23 @@ module.exports = (user, perm) => {
   case types.EDIT_NAME:
   case types.EDIT_COMMENT:
     return true;
+  case types.ADD_COMMENT_TAG:
+  case types.REMOVE_COMMENT_TAG:
+    return check(user, ['ADMIN', 'MODERATOR', 'STAFF']);
   case types.UPDATE_USER_ROLES:
   case types.REJECT_USERNAME:
   case types.SET_USER_STATUS:
   case types.SUSPEND_USER:
   case types.SET_COMMENT_STATUS:
-  case types.ADD_COMMENT_TAG:
-  case types.REMOVE_COMMENT_TAG:
   case types.UPDATE_CONFIG:
   case types.UPDATE_SETTINGS:
   case types.UPDATE_WORDLIST:
+  case types.UPDATE_ASSET_SETTINGS:
+  case types.UPDATE_ASSET_STATUS:
     return check(user, ['ADMIN', 'MODERATOR']);
   case types.CREATE_TOKEN:
   case types.REVOKE_TOKEN:
     return check(user, ['ADMIN']);
-  case types.UPDATE_ASSET_SETTINGS:
-    return check(user, ['ADMIN', 'MODERATOR']);
-  case types.UPDATE_ASSET_STATUS:
-    return check(user, ['ADMIN', 'MODERATOR']);
   default:
     break;
   }