only an admin can add products