Protect user list from all but admin users