Block access to plugins.php for custom role

Block access to plugins.php for custom role