philipn: add authorization check to see if manager services are called by admins only