Added ACL to control admin functions