Restrict functionality in administrative section for different user levels

Implements and closes #120.