Looks like the IsAdmin() function didn't work. Changed to discriminate by Security instead.