Basic caller access implemented, with @is_admin checks