restrict admin functions to shareholder