add current_user_can('edit_themes')

better code protection