Permissions to view/edit Mac adresses without Captive Portal

[jkacc]

We have a user who should only have permissions to view and edit Mac-adresses (Services > Captive Portal > Pass-through MAC)

We have given this user the following permissions:

TD_Admins        WebCfg - Services: Captive portal: Edit MAC Addresses page  Allow access to the 'Services: Captive portal: Edit MAC Addresses' page.       
TD_Admins        WebCfg - Services: Captive portal: Mac Addresses page            Allow access to the 'Services: Captive portal: Mac Addresses' page.
TD_Admins        WebCfg - Status: Captive portal page                                                Allow access to the 'Status: Captive portal' page.   
TD_Admins        WebCfg - Status: Captive portal test Vouchers page                    Allow access to the 'Status: Captive portal Test Vouchers' page.   
TD_Admins        WebCfg - Status: DHCP leases page                                                    Allow access to the 'Status: DHCP leases' page.   
TD_Admins        WebCfg - Status: Gateways page                                                        Allow access to the 'Status: Gateways' page.               
TD_Admins        WebCfg - Status: Interfaces page                                                        Allow access to the 'Status: Interfaces' page.               
TD_Admins        WebCfg - Status: RRD Graphs page                                                      Allow access to the 'Status: RRD Graphs' page.   
TD_Admins        WebCfg - Status: Traffic Graph page                                                  Allow access to the 'Status: Traffic Graph' page.   
TD_Admins        WebCfg - Status: Services page                                                            Allow access to the 'Status: Services' page.               
TD_Admins        WebCfg - Services: Captive portal page                                              Allow access to the 'Services: Captive portal' page.

However with these permissions he is also able to edit the “Captive Portal” page. (Services > Captive Portal)

When I remove this permission “Allow access to the 'Services: Captive portal' page.”, I am able to add Mac addresses but unable to see the list of Mac adresses.

I would like my user to only have permissions to view, add and edit Mac adresses. How is this to be achieved?