Lock project actions to admin users only