lock down delete to admin