Fix permissions on sidebar tabs for sub-users, closes #346