As part of the testing/fixing of the authz security stuff I did Friday, you will notice that I replaced the Administration page with the menu bar. Everything you could have done via the admin .jsp page is now done through the Administration menu bar items. If you do not have permission to access one of the pages, you won't see it on the menu bar (i.e. rhqadmin shows all menu items, but a user with, for example, only MANAGE_SETTINGS permission, will see a subset of items in the menu bar). (if a clever user tries to circumvent the security by typing in an explicit URL to try to go directly to an admin page that they are not permitted to see, I made sure an error gets spit)