Use the scope to determine what the user has access to

src/views/settings.js

@@ -1,7 +1,7 @@
 'use strict';
 
 angular.module('Application').controller('SettingsController', ['$scope', '$location', '$rootScope', '$timeout', 'Client', 'AppStore', function ($scope, $location, $rootScope, $timeout, Client, AppStore) {
-    Client.onReady(function () { if (!Client.getUserInfo().admin) $location.path('/'); });
+    Client.onReady(function () { if (!Client.hasScope('settings')) $location.path('/'); });
 
     $scope.client = Client;
     $scope.user = Client.getUserInfo();