User should not be able to perform any actions on snapshots if it's not an admin user

Current situation (ver 4.0, 4.1, 4.1.1) is that users can:
List snapshots on the tenant,
Upload a snapshot,
Delete a snapshot.

We should not allow that.