Manual Outbound NAT for a restricted user

[init0]

Hello everybody,

I try to create a restricted user in 2.0RC who is able to edit manual outbount NAT rules.
No matter what pages I assign to that user, he is only able to choose "OpenVPN" as interface. Only when I assign "WebCfg - All pages" the user is able to choose the WAN interface.
I tried to assign the obvious and less obvious pages, this is my current list:

WebCfg - System: Login / Logout page / Dashboard
WebCfg - Firewall: Virtual IP Address: Edit page
WebCfg - Firewall: Virtual IP Addresses page
WebCfg - Firewall: NAT: Outbound page
WebCfg - Firewall: NAT: Outbound: Edit page
WebCfg - Firewall: NAT: Port Forward page
WebCfg - Required for javascript page
WebCfg - Status: Interfaces page
WebCfg - Interfaces: WAN page
WebCfg - Interfaces: Assign network ports page
WebCfg - Interfaces: Groups page
WebCfg - Interfaces: Bridge page
WebCfg - Interfaces: GIF page
WebCfg - Interfaces: GRE page
WebCfg - Interfaces: PPP page
WebCfg - Interfaces: QinQ page
WebCfg - Interfaces: VLAN page
WebCfg - Interfaces: Wireless page
WebCfg - System: Gateways page
WebCfg - XMLRPC Interface Stats page

What am I missing?
Thanks in advance!

Jens