if user is not an admin than restrict from editing items