What are the steps to reproduce your problem?

• In Webapps create the user, that is not the Camunda admin, but has access to Admin app
• Log in with this user
• Enter the URL http://localhost:8080/camunda/app/admin/default/#/system to access System tabs, that is not visible in the menu

What is the problem?

• user can see License information and even replace it with another valid license

What would be the expected behavior:

• user must not be able to see License information and replace it

Hints (optional):
ManagementService#getProperties must be available only for Camunda Admin