server setting accessible by normal user with link even no 'manage' tab at Jasper server 8.0

Hi all,

I have problem with current 8.0 version for jasper server. I have noticed that if I login using admin I can access server setting at 'Manage' tab.

The problem is when I login using normal user privileges which is not admin, I still can access server setting even without 'Manage' tab as long as I have the links. The security like no use. 

Please help if have any solution so that normal user CANNOT access server setting via link.

I have attach example account which do not have 'Manage' tab but still can open server setting page with url.