protect url addressbook configuration for manager and root only