Ensure that stock items cannot be seen/modified by normal API users
Ensure that stock locations cannot be seen/modified by normal API users
Ensure that StockMovement actions are restricted to admins only