Hello Frank,
I've created new user for test without any roles and profiles and even without any permissions I can manage this page, only this page is accessible for managing. For other pages like NWA, IRJ etc. authorization is requres and this is strange.
We don't use LDAP/AD database, only ABAP store so there is no any AD impact on this issue.