restrict access to admins only, table redesign