Only allow access to backend for users that have the core.manage permission.