Ensure that stock items cannot be seen/modified by normal API users
Ensure that StockMovement actions are restricted to admins only
Ensure that stock locations cannot be seen/modified by normal API users

Conflicts:
	api/app/controllers/spree/api/stock_locations_controller.rb