- require admin role for list and resubmit actions