Restrict access to project actions to admins only, except index and show