[api] refactor Store api, only access for admin by default.