Restrict access to goal actions to admins only.