Restrict actions of non-admins