restrict access to projects to admins