restric access to project actions for admin