diff --git a/admin/core/um-admin-actions-ajax.php b/admin/core/um-admin-actions-ajax.php
index 6568468a..34d7eb65 100644
--- a/admin/core/um-admin-actions-ajax.php
+++ b/admin/core/um-admin-actions-ajax.php
@@ -59,6 +59,10 @@
 
 		$arr_options = array();
 
+		if( ! current_user_can('manage_options') ){
+			wp_die( __( 'This is not possible for security reasons.','ultimatemember') );
+		}
+		
         $um_callback_func = $_POST['um_option_callback'];
         if( empty( $um_callback_func ) ){
         	$arr_options['status'] = 'empty';