Added support for reading the settings object alone.
Fixed security bug which allowed admin class escalation.