The 'user_referral.settings' has the permission 'access administration pages', which is too slack as that is necessary to access to some route of Core - e.g. taxonomies.
Use some more specific permission, possibily defined by the modue itself, such as 'administer user referral types'
Needs review
2.0
Code
Not all content is available!
It's likely this issue predates Contrib.social: some issue and comment data are missing.