Deny controls access to non-admin