lock down project actions for admin