add admin privileges check