(security) access to admin/store is restricted to admins & managers

also, access to admin/store/settings is not allowed to managers

app/frontend/src/javascript/controllers/application.js

@@ -353,6 +353,7 @@ Application.Controllers.controller('ApplicationController', ['$rootScope', '$sco
           if (AuthService.isAuthenticated()) {
           // user is not allowed
             console.error('[ApplicationController::initialize] user is not allowed');
+            return false;
           } else {
           // user is not logged in
             openLoginModal(trans.$to().name, trans.$to().params);

app/frontend/src/javascript/router.js

@@ -1195,6 +1195,9 @@ angular.module('application.router', ['ui.router'])
       .state('app.admin.store.settings', {
         url: '/settings',
         abstract: !Fablab.storeModule,
+        data: {
+          authorizedRoles: ['admin']
+        },
         views: {
           'main@': {
             templateUrl: '/admin/store/index.html',

app/frontend/templates/admin/store/index.html

@@ -14,7 +14,7 @@
     <div>
       <uib-tabset justified="true" active="tabs.active">
 
-        <uib-tab heading="{{ 'app.admin.store.settings' | translate }}" index="0" select="selectTab()">
+        <uib-tab heading="{{ 'app.admin.store.settings' | translate }}" index="0" select="selectTab()" ng-hide="currentUser.role == 'manager'">
           <ng-include src="'/admin/store/settings.html'"></ng-include>
         </uib-tab>