Restrict downloading to manages and admins