access download controller only in admin mode