restrict access to place actions to admin only