Looking at the site (apart from ActiveAdmin) the link for "Creating New Protocol" under Manage Protocols page is available whether an admin is logged in or not. I'm of the understanding that only the admins are to create new protocols. Am I remembering this correctly or am I mistaken?
If so it would be a simple thing to add an admin_user_signed_in? check for that resource.