go back to try/catch version, and verify that this call is only being made from the client if isAdmin