Restrict access to project to admin