restrict project admin access