#3031 methods lockdown to backend/admin role