restrict mbox GUI admin access