Preventing group admins from accessing system-wide settings

@schester Something related to this was posted here, regarding the idea of a new feature to handle app configuration authorizations.