Admin restrictions in main controller.