Restrict access to project actions to admin only