Restrict `passenger` Users

Restrict `passenger` users from accessing sensitive manager pages.