add check for admin rights