restrict access to projects to only admins