Restrict editability of admin settings page to manager in frontend and API

[usu]

As a camp member I'm not able to change camp settings (e.g. adding new categories, adding new material lists).

In the backend (on the API), I'm however able to do so.

Is this by purpose or an inconsistency?

[manuelmeister]

Core Meeting Decision

• Restrict editability of admin settings page to manager in API.
• Add alert on under the toolbar notifying about the current user role and its capabilities.
• Inputfields should be readonly instead of disabled.