diff --git a/src/main/java/org/gcube/data/access/storagehub/Roles.java b/src/main/java/org/gcube/data/access/storagehub/Roles.java
new file mode 100644
index 0000000..b248a78
--- /dev/null
+++ b/src/main/java/org/gcube/data/access/storagehub/Roles.java
@@ -0,0 +1,7 @@
+package org.gcube.data.access.storagehub;
+
+public class Roles {
+
+	public static final String VREMANAGER_ROLE = "VRE-Manager";
+	public static final String INFRASTRUCTURE_MANAGER_ROLE = "Infrastructure-Manager";
+}
diff --git a/src/main/java/org/gcube/data/access/storagehub/services/GroupManager.java b/src/main/java/org/gcube/data/access/storagehub/services/GroupManager.java
index cbfaad7..9e8ebcf 100644
--- a/src/main/java/org/gcube/data/access/storagehub/services/GroupManager.java
+++ b/src/main/java/org/gcube/data/access/storagehub/services/GroupManager.java
@@ -1,5 +1,7 @@
 package org.gcube.data.access.storagehub.services;
 
+import static org.gcube.data.access.storagehub.Roles.*;
+
 import java.security.Principal;
 import java.util.ArrayList;
 import java.util.Iterator;
@@ -78,10 +80,7 @@ public class GroupManager {
 
 	@Inject
 	TrashHandler trashHandler;
-		
-	private static final String VREMANAGER_ROLE = "VRE-Manager";
-	private static final String INFRASTRUCTURE_MANAGER_ROLE = "Infrastructure-Manager";
-
+	
 	private static final Logger log = LoggerFactory.getLogger(GroupManager.class);
 
 	RepositoryInitializer repository = StorageHubAppllicationManager.repository;
diff --git a/src/main/java/org/gcube/data/access/storagehub/services/admin/ItemManager.java b/src/main/java/org/gcube/data/access/storagehub/services/admin/ItemManager.java
deleted file mode 100644
index d4e8277..0000000
--- a/src/main/java/org/gcube/data/access/storagehub/services/admin/ItemManager.java
+++ /dev/null
@@ -1,22 +0,0 @@
-package org.gcube.data.access.storagehub.services.admin;
-
-import javax.jcr.Item;
-import javax.ws.rs.Consumes;
-import javax.ws.rs.POST;
-import javax.ws.rs.Path;
-import javax.ws.rs.core.MediaType;
-
-@Path("admin/items")
-public class ItemManager {
-
-	
-	@POST
-	@Consumes(MediaType.APPLICATION_JSON)
-	private String createItem(Item item) {
-		
-		
-		return null;
-	}
-	
-	
-}
diff --git a/src/main/java/org/gcube/data/access/storagehub/services/admin/ItemManagerAdmin.java b/src/main/java/org/gcube/data/access/storagehub/services/admin/ItemManagerAdmin.java
new file mode 100644
index 0000000..9baf54b
--- /dev/null
+++ b/src/main/java/org/gcube/data/access/storagehub/services/admin/ItemManagerAdmin.java
@@ -0,0 +1,118 @@
+package org.gcube.data.access.storagehub.services.admin;
+
+import static org.gcube.data.access.storagehub.Roles.*;
+
+import java.util.Collections;
+import java.util.List;
+
+import javax.inject.Inject;
+import javax.jcr.Node;
+import javax.jcr.RepositoryException;
+import javax.jcr.Session;
+import javax.servlet.ServletContext;
+import javax.ws.rs.Consumes;
+import javax.ws.rs.GET;
+import javax.ws.rs.POST;
+import javax.ws.rs.Path;
+import javax.ws.rs.PathParam;
+import javax.ws.rs.Produces;
+import javax.ws.rs.core.Context;
+import javax.ws.rs.core.MediaType;
+import javax.ws.rs.core.Response;
+
+import org.apache.jackrabbit.api.JackrabbitSession;
+import org.gcube.common.authorization.control.annotations.AuthorizationControl;
+import org.gcube.common.gxrest.response.outbound.GXOutboundErrorResponse;
+import org.gcube.common.storagehub.model.exceptions.BackendGenericError;
+import org.gcube.common.storagehub.model.exceptions.StorageHubException;
+import org.gcube.common.storagehub.model.items.Item;
+import org.gcube.common.storagehub.model.service.ItemWrapper;
+import org.gcube.data.access.storagehub.StorageHubAppllicationManager;
+import org.gcube.data.access.storagehub.Utils;
+import org.gcube.data.access.storagehub.exception.MyAuthException;
+import org.gcube.data.access.storagehub.handlers.CredentialHandler;
+import org.gcube.data.access.storagehub.handlers.items.Node2ItemConverter;
+import org.gcube.data.access.storagehub.services.RepositoryInitializer;
+import org.gcube.smartgears.utils.InnerMethodName;
+import org.slf4j.Logger;
+import org.slf4j.LoggerFactory;
+
+@Path("admin")
+public class ItemManagerAdmin {
+
+	private static final Logger log = LoggerFactory.getLogger(ItemManagerAdmin.class);
+	
+	RepositoryInitializer repository = StorageHubAppllicationManager.repository;
+
+	@Inject 
+	Node2ItemConverter node2Item;
+
+	@Context ServletContext context;
+	
+	@POST
+	@Consumes(MediaType.APPLICATION_JSON)
+	@Path("items/{id}")
+	@AuthorizationControl(allowedRoles = {INFRASTRUCTURE_MANAGER_ROLE},exception=MyAuthException.class)
+	public String createItem(@PathParam("id") String id, Item item) {
+		return null;
+	}
+
+	@GET
+	@Produces(MediaType.APPLICATION_JSON)
+	@Path("{user}")
+	@AuthorizationControl(allowedRoles = {INFRASTRUCTURE_MANAGER_ROLE},exception=MyAuthException.class)
+	public ItemWrapper<Item> getWorkspace(@PathParam("user") String user) {
+		InnerMethodName.instance.set("move");
+
+		Item item =null;
+		Session session = null;
+		try{
+			session = (JackrabbitSession) repository.getRepository().login(CredentialHandler.getAdminCredentials(context));
+			String workspacePath = Utils.getWorkspacePath(user).toPath();
+			Node node = session.getNode(workspacePath);
+			item = node2Item.getItem(node, Collections.emptyList());
+			
+		}catch(RepositoryException re ){
+			log.error("jcr error moving item", re);
+			GXOutboundErrorResponse.throwException(new BackendGenericError(re));
+		}catch(StorageHubException she ){
+			log.error(she.getErrorMessage(), she);
+			GXOutboundErrorResponse.throwException(she, Response.Status.fromStatusCode(she.getStatus()));
+		} finally{
+			if (session!=null) {
+				session.logout();
+			}
+		}
+		return new ItemWrapper<Item>(item);
+	}
+	
+	@GET
+	@Produces(MediaType.APPLICATION_JSON)
+	@Path("items/{id}/children")
+	@AuthorizationControl(allowedRoles = {INFRASTRUCTURE_MANAGER_ROLE},exception=MyAuthException.class)
+	public List<Item> getChildren(@PathParam("id") String id) {
+		InnerMethodName.instance.set("move");
+
+		List<Item> items =null;
+		Session session = null;
+		try{
+			session = (JackrabbitSession) repository.getRepository().login(CredentialHandler.getAdminCredentials(context));
+			Node node = session.getNodeByIdentifier(id);
+			
+			items = Utils.getItemList(node, Collections.emptyList(), null, true, null);
+			
+		}catch(RepositoryException re ){
+			log.error("jcr error moving item", re);
+			GXOutboundErrorResponse.throwException(new BackendGenericError(re));
+		}catch(StorageHubException she ){
+			log.error(she.getErrorMessage(), she);
+			GXOutboundErrorResponse.throwException(she, Response.Status.fromStatusCode(she.getStatus()));
+		} finally{
+			if (session!=null) {
+				session.logout();
+			}
+		}
+		return items;
+	}
+	
+}