restrict access to data imports tab for non-admins

[misha-ignatenko]

This was done earlier. When a sample user is created automatically, its showDataImportsTab attribute is set to false. If that user tries to change their showDataImportsTab setting from the client side, they will get an access denied error.