Add 'toolkit.read' permission, give it to admin user
Change user config to a management command
Apply toolkit.read permission to relevant views

Previously they just had "requires_login", however to allow a very
minimally permissioned (?) user increase the requirement to the write
permission, with the exception of the index and rota_edit pages.