add basic security checks in admin list controller actions / refactor te...

...mplate