Users shouldn't be able to access admin actions.