readonly table header for non-admins