NFA Users have access to admin page without right permissions