Added functionality to disable update and delete if the user is not an admin