Security fixes Anon can modify QA

Fixe restriction on qa-manage to limit access for admin users