Restrict access to product actions to admins only