normal logged in subscriber can access the course section

after update to the latest version, with a normal logged in subscriber account can access the course menu. by adding the /admin (sitename.com/portal/admin)

they can create course. even though it say you are not allow on the screen.