only admins can access assets index