02-03-2019, 03:03 PM
If you're on 4.4, you should be able to go to tools->security logs and see what pages that user was bumped from. You can check to see if they have permission to view those pages. If you're on 4.3.x, it's usersc/tomfoolery.php but I forget what that link is called on the dashboard.