This looks wrong.  We don't want to worry about having to pass isAdmin, since the MakeAPI should just check that based on the user id.