Shouldn't there be an else branch here to raise exception that user is not an admin?