authorize admin for new action