prevent non-admins from editing