admin can only access cube