Restrict access to project some actions to admins only