admin restriction
add size to api response