only admin access to scaffolds

The exception is that unauthenticated and non-admin can view all
except users, but cannot change anything.

Signed-off-by: Zeljko <zeljko@zwr.fi>