Restrict access to admin

oag 207