Block non-admins from admin area using cancan