admin lock / unlock via popup