allows call from extension bridge if owner or co-admin