Restrict project actions to admins only