Don't show the "Add Provider" link for users that don't have the "Manage Providers" privilege

The "Add Provider" link appears, and the page opens even if the user doesn't have the "Manage Provider" privilege.
See...
http://localhost:8080/openmrs/admin/provider/index.htm
and
http://localhost:8080/openmrs/admin/provider/provider.form