use is_admin() with current_user_can (