diff --git a/apps/cory/index.json b/apps/cory/index.json
index 3908d086..24c9c94f 100644
--- a/apps/cory/index.json
+++ b/apps/cory/index.json
@@ -1 +1 @@
-{"type":"tildefriends-app","files":{"app.js":"&ovJdMIXT/ocLxZ1rO1N03SpZr3w3RFKCFXl+isnXcx4=.sha256","index.html":"&TFtniuUIVO7XeWCgwmqPAmuBzpGX6slxJQcPMEr+860=.sha256","vue-material.js":"&K5cdLqXYCENPak/TCINHQhyJhpS4G9DlZHGwoh/LF2g=.sha256"}}
\ No newline at end of file
+{"type":"tildefriends-app","files":{"app.js":"&6uFJG2C0kZar1Aj+7p2/KzYEBXgmK/uJSt7aIJqenN4=.sha256","index.html":"&TFtniuUIVO7XeWCgwmqPAmuBzpGX6slxJQcPMEr+860=.sha256","vue-material.js":"&K5cdLqXYCENPak/TCINHQhyJhpS4G9DlZHGwoh/LF2g=.sha256"}}
\ No newline at end of file
diff --git a/apps/cory/index/app.js b/apps/cory/index/app.js
index 342dd734..532d0645 100644
--- a/apps/cory/index/app.js
+++ b/apps/cory/index/app.js
@@ -368,7 +368,14 @@ core.register('message', async function(m) {
 });
 
 async function main() {
-	await app.setDocument(utf8Decode(await getFile("index.html")));
+	if (core.user &&
+		core.user.credentials &&
+		core.user.credentials.permissions &&
+		core.user.credentials.permissions.administration) {
+		await app.setDocument(utf8Decode(await getFile("index.html")));
+	} else {
+		await app.setDocument('<div style="color: #f00">Only the administrator can use this app at this time.  Login at the top right.</div>');
+	}
 }
 
 main();
\ No newline at end of file