Auto redirect or something like this

[Maximilian Fischer]

The user can for example access the /config page even if he is not allowed to

please fix this
.
....
..
:)