diff --git a/src/controllers/custom/getConfigDataController.ts b/src/controllers/custom/getConfigDataController.ts
index 9a8684ca..12208527 100644
--- a/src/controllers/custom/getConfigDataController.ts
+++ b/src/controllers/custom/getConfigDataController.ts
@@ -1,8 +1,14 @@
 import { RequestHandler } from "express";
 import { config } from "@/src/services/configService";
+import { getAccountForRequest, isAdministrator } from "@/src/services/loginService";
 
-const getConfigDataController: RequestHandler = (_req, res) => {
-    res.json(config);
+const getConfigDataController: RequestHandler = async (req, res) => {
+    const account = await getAccountForRequest(req);
+    if (isAdministrator(account)) {
+        res.json(config);
+    } else {
+        res.status(401).end();
+    }
 };
 
 export { getConfigDataController };
diff --git a/src/controllers/custom/updateConfigDataController.ts b/src/controllers/custom/updateConfigDataController.ts
index 3fdcc8e8..961cccb1 100644
--- a/src/controllers/custom/updateConfigDataController.ts
+++ b/src/controllers/custom/updateConfigDataController.ts
@@ -1,9 +1,15 @@
 import { RequestHandler } from "express";
 import { updateConfig } from "@/src/services/configService";
+import { getAccountForRequest, isAdministrator } from "@/src/services/loginService";
 
 const updateConfigDataController: RequestHandler = async (req, res) => {
-    await updateConfig(String(req.body));
-    res.end();
+    const account = await getAccountForRequest(req);
+    if (isAdministrator(account)) {
+        await updateConfig(String(req.body));
+        res.end();
+    } else {
+        res.status(401).end();
+    }
 };
 
 export { updateConfigDataController };
diff --git a/static/webui/index.html b/static/webui/index.html
index 2ab99f23..eb89f400 100644
--- a/static/webui/index.html
+++ b/static/webui/index.html
@@ -198,75 +198,80 @@
                     <div class="col-lg-4">
                         <div class="card mb-4">
                             <h5 class="card-header">Server</h5>
-                            <form class="card-body" onsubmit="doChangeSettings();return false;">
-                                <div class="form-check">
-                                    <input class="form-check-input" type="checkbox" id="skipStoryModeChoice" />
-                                    <label class="form-check-label" for="skipStoryModeChoice">Skip Story Mode Choice</label>
+                            <div class="card-body">
+                                <div id="server-settings-no-perms" class="d-none">
+                                    <p>You must be an administrator to use this feature. To become an administrator, add <code>"<span class="displayname"></span>"</code> to <code>administratorNames</code> in the config.json.</p>
                                 </div>
-                                <div class="form-check">
-                                    <input class="form-check-input" type="checkbox" id="skipTutorial" />
-                                    <label class="form-check-label" for="skipTutorial">Skip Tutorial</label>
-                                </div>
-                                <div class="form-check">
-                                    <input class="form-check-input" type="checkbox" id="skipAllDialogue" />
-                                    <label class="form-check-label" for="skipAllDialogue">Skip All Dialogue</label>
-                                </div>
-                                <div class="form-check">
-                                    <input class="form-check-input" type="checkbox" id="unlockAllScans" />
-                                    <label class="form-check-label" for="unlockAllScans">Unlock All Scans</label>
-                                </div>
-                                <div class="form-check">
-                                    <input class="form-check-input" type="checkbox" id="unlockAllMissions" />
-                                    <label class="form-check-label" for="unlockAllMissions">Unlock All Missions</label>
-                                </div>
-                                <div class="form-check">
-                                    <input class="form-check-input" type="checkbox" id="unlockAllQuests" />
-                                    <label class="form-check-label" for="unlockAllQuests">Unlock All Quests</label>
-                                </div>
-                                <div class="form-check">
-                                    <input class="form-check-input" type="checkbox" id="completeAllQuests" />
-                                    <label class="form-check-label" for="completeAllQuests">Complete All Quests</label>
-                                </div>
-                                <div class="form-check">
-                                    <input class="form-check-input" type="checkbox" id="infiniteCredits" />
-                                    <label class="form-check-label" for="infiniteCredits">Infinite Credits</label>
-                                </div>
-                                <div class="form-check">
-                                    <input class="form-check-input" type="checkbox" id="infinitePlatinum" />
-                                    <label class="form-check-label" for="infinitePlatinum">Infinite Platinum</label>
-                                </div>
-                                <div class="form-check">
-                                    <input class="form-check-input" type="checkbox" id="unlockAllShipFeatures" />
-                                    <label class="form-check-label" for="unlockAllShipFeatures">Unlock All Ship Features</label>
-                                </div>
-                                <div class="form-check">
-                                    <input class="form-check-input" type="checkbox" id="unlockAllShipDecorations" />
-                                    <label class="form-check-label" for="unlockAllShipDecorations">Unlock All Ship Decorations</label>
-                                </div>
-                                <div class="form-check">
-                                    <input class="form-check-input" type="checkbox" id="unlockAllFlavourItems" />
-                                    <label class="form-check-label" for="unlockAllFlavourItems">
-                                        Unlock All <abbr title="Animation Sets, Glyphs, Plattes, etc.">Flavor Items</abbr>
-                                    </label>
-                                </div>
-                                <div class="form-check">
-                                    <input class="form-check-input" type="checkbox" id="unlockAllSkins" />
-                                    <label class="form-check-label" for="unlockAllSkins">Unlock All Skins</label>
-                                </div>
-                                <div class="form-check">
-                                    <input class="form-check-input" type="checkbox" id="universalPolarityEverywhere" />
-                                    <label class="form-check-label" for="universalPolarityEverywhere">
-                                        Universal Polarity Everywhere
-                                    </label>
-                                </div>
-                                <div class="form-group mt-2">
-                                    <label class="form-label" for="spoofMasteryRank">
-                                        Spoofed Mastery Rank (-1 to disable)
-                                    </label>
-                                    <input class="form-control" id="spoofMasteryRank" type="number" min="-1" />
-                                </div>
-                                <button class="btn btn-primary mt-3" type="submit">Save Settings</button>
-                            </form>
+                                <form id="server-settings" class="d-none" onsubmit="doChangeSettings();return false;">
+                                    <div class="form-check">
+                                        <input class="form-check-input" type="checkbox" id="skipStoryModeChoice" />
+                                        <label class="form-check-label" for="skipStoryModeChoice">Skip Story Mode Choice</label>
+                                    </div>
+                                    <div class="form-check">
+                                        <input class="form-check-input" type="checkbox" id="skipTutorial" />
+                                        <label class="form-check-label" for="skipTutorial">Skip Tutorial</label>
+                                    </div>
+                                    <div class="form-check">
+                                        <input class="form-check-input" type="checkbox" id="skipAllDialogue" />
+                                        <label class="form-check-label" for="skipAllDialogue">Skip All Dialogue</label>
+                                    </div>
+                                    <div class="form-check">
+                                        <input class="form-check-input" type="checkbox" id="unlockAllScans" />
+                                        <label class="form-check-label" for="unlockAllScans">Unlock All Scans</label>
+                                    </div>
+                                    <div class="form-check">
+                                        <input class="form-check-input" type="checkbox" id="unlockAllMissions" />
+                                        <label class="form-check-label" for="unlockAllMissions">Unlock All Missions</label>
+                                    </div>
+                                    <div class="form-check">
+                                        <input class="form-check-input" type="checkbox" id="unlockAllQuests" />
+                                        <label class="form-check-label" for="unlockAllQuests">Unlock All Quests</label>
+                                    </div>
+                                    <div class="form-check">
+                                        <input class="form-check-input" type="checkbox" id="completeAllQuests" />
+                                        <label class="form-check-label" for="completeAllQuests">Complete All Quests</label>
+                                    </div>
+                                    <div class="form-check">
+                                        <input class="form-check-input" type="checkbox" id="infiniteCredits" />
+                                        <label class="form-check-label" for="infiniteCredits">Infinite Credits</label>
+                                    </div>
+                                    <div class="form-check">
+                                        <input class="form-check-input" type="checkbox" id="infinitePlatinum" />
+                                        <label class="form-check-label" for="infinitePlatinum">Infinite Platinum</label>
+                                    </div>
+                                    <div class="form-check">
+                                        <input class="form-check-input" type="checkbox" id="unlockAllShipFeatures" />
+                                        <label class="form-check-label" for="unlockAllShipFeatures">Unlock All Ship Features</label>
+                                    </div>
+                                    <div class="form-check">
+                                        <input class="form-check-input" type="checkbox" id="unlockAllShipDecorations" />
+                                        <label class="form-check-label" for="unlockAllShipDecorations">Unlock All Ship Decorations</label>
+                                    </div>
+                                    <div class="form-check">
+                                        <input class="form-check-input" type="checkbox" id="unlockAllFlavourItems" />
+                                        <label class="form-check-label" for="unlockAllFlavourItems">
+                                            Unlock All <abbr title="Animation Sets, Glyphs, Plattes, etc.">Flavor Items</abbr>
+                                        </label>
+                                    </div>
+                                    <div class="form-check">
+                                        <input class="form-check-input" type="checkbox" id="unlockAllSkins" />
+                                        <label class="form-check-label" for="unlockAllSkins">Unlock All Skins</label>
+                                    </div>
+                                    <div class="form-check">
+                                        <input class="form-check-input" type="checkbox" id="universalPolarityEverywhere" />
+                                        <label class="form-check-label" for="universalPolarityEverywhere">
+                                            Universal Polarity Everywhere
+                                        </label>
+                                    </div>
+                                    <div class="form-group mt-2">
+                                        <label class="form-label" for="spoofMasteryRank">
+                                            Spoofed Mastery Rank (-1 to disable)
+                                        </label>
+                                        <input class="form-control" id="spoofMasteryRank" type="number" min="-1" />
+                                    </div>
+                                    <button class="btn btn-primary mt-3" type="submit">Save Settings</button>
+                                </form>
+                            </div>
                         </div>
                     </div>
                     <div class="col-lg-4">
diff --git a/static/webui/script.js b/static/webui/script.js
index 1be39ceb..56736c38 100644
--- a/static/webui/script.js
+++ b/static/webui/script.js
@@ -792,7 +792,7 @@ const uiConfigs = [
 ];
 
 function doChangeSettings() {
-    fetch("/custom/config")
+    fetch("/custom/config?" + window.authz)
         .then(response => response.json())
         .then(json => {
             for (const i of uiConfigs) {
@@ -810,7 +810,7 @@ function doChangeSettings() {
                 }
             }
             $.post({
-                url: "/custom/config",
+                url: "/custom/config?" + window.authz,
                 contentType: "text/plain",
                 data: JSON.stringify(json, null, 2)
             });
@@ -820,23 +820,34 @@ function doChangeSettings() {
 // Cheats route
 
 single.getRoute("/webui/cheats").on("beforeload", function () {
-    fetch("/custom/config")
-        .then(response => response.json())
-        .then(json =>
-            Object.entries(json).forEach(entry => {
-                const [key, value] = entry;
-                var x = document.getElementById(`${key}`);
-                if (x != null) {
-                    if (x.type == "checkbox") {
-                        if (value === true) {
-                            x.setAttribute("checked", "checked");
-                        }
-                    } else if (x.type == "number") {
-                        x.setAttribute("value", `${value}`);
-                    }
+    let interval;
+    interval = setInterval(() => {
+        if (window.authz) {
+            clearInterval(interval);
+            fetch("/custom/config?" + window.authz).then(res => {
+                if (res.status == 200) {
+                    $("#server-settings").removeClass("d-none");
+                    res.json().then(json =>
+                        Object.entries(json).forEach(entry => {
+                            const [key, value] = entry;
+                            var x = document.getElementById(`${key}`);
+                            if (x != null) {
+                                if (x.type == "checkbox") {
+                                    if (value === true) {
+                                        x.setAttribute("checked", "checked");
+                                    }
+                                } else if (x.type == "number") {
+                                    x.setAttribute("value", `${value}`);
+                                }
+                            }
+                        })
+                    );
+                } else {
+                    $("#server-settings-no-perms").removeClass("d-none");
                 }
-            })
-        );
+            });
+        }
+    }, 10);
 
     fetch("http://localhost:61558/ping", { mode: "no-cors" })
         .then(() => {