only admins can access stage 1 and 2