Remove isAdmin-check, will be done in hasAccess