diff --git a/classes/handler/administrative.php b/classes/handler/administrative.php
new file mode 100644
index 000000000..52dfed8b7
--- /dev/null
+++ b/classes/handler/administrative.php
@@ -0,0 +1,11 @@
+<?php
+class Handler_Administrative extends Handler_Protected {
+   function before($method) {
+      if (parent::before($method)) {
+         if (($_SESSION["access_level"] ?? 0) >= 10) {
+            return true;
+         }
+      }
+      return false;
+   }
+}
diff --git a/classes/pref/system.php b/classes/pref/system.php
index 14df6f8d1..2a97ec6f0 100644
--- a/classes/pref/system.php
+++ b/classes/pref/system.php
@@ -1,20 +1,9 @@
 <?php
 
-class Pref_System extends Handler_Protected {
+class Pref_System extends Handler_Administrative {
 
 	private $log_page_limit = 15;
 
-	function before($method) {
-		if (parent::before($method)) {
-			if ($_SESSION["access_level"] < 10) {
-				print __("Your access level is insufficient to open this tab.");
-				return false;
-			}
-			return true;
-		}
-		return false;
-	}
-
 	function csrf_ignore($method) {
 		$csrf_ignored = array("index");
 
diff --git a/classes/pref/users.php b/classes/pref/users.php
index 9d9ea4d8e..b34f85d88 100644
--- a/classes/pref/users.php
+++ b/classes/pref/users.php
@@ -1,16 +1,5 @@
 <?php
-class Pref_Users extends Handler_Protected {
-		function before($method) {
-			if (parent::before($method)) {
-				if ($_SESSION["access_level"] < 10) {
-					print __("Your access level is insufficient to open this tab.");
-					return false;
-				}
-				return true;
-			}
-			return false;
-		}
-
+class Pref_Users extends Handler_Administrative {
 		function csrf_ignore($method) {
 			$csrf_ignored = array("index", "userdetails");