This needs to be `require_authorized_admin`