Allow access to subsites only with the "adminster group" permission.

#4133