@muffinresearch do you mean that the user must have the `amo.AUTHOR_ROLE_OWNER` role or that the developer of another app shouldn't access that page? The later case is tested below: https://github.com/mozilla/zamboni/pull/1000/files#L2R710