admin tabs are displayed only if user has :admin right on resource

Fixes #2626