Restrict access to project actions to admins