UP-4106 Enforce CONFIG permission.

Addresses CVE-2014-3417.
Merge pull request #331 from apetro/enforce_config_on_jasig_master

UP-4106 Enforce CONFIG permission.