Users without update permission are prompted to update

Users who do not have permission to access update (i.e. everyone but user/1) still get the message, "Some of your modules are out of date." When they click the message, they promptly get Access Denied.