Add social settings access ability

app/models/spree/social_authentication_abilities.rb

@@ -0,0 +1,9 @@
+class Spree::SocialAuthenticationAbilities
+  include CanCan::Ability
+
+  def initialize(user)
+    if user.respond_to?(:has_spree_role?) && user.has_spree_role?('admin')
+      can :manage, Spree::SocialConfiguration
+    end
+  end
+end

app/overrides/add_socials_to_admin_configuration.rb

@@ -2,5 +2,5 @@
   virtual_path: 'spree/admin/shared/sub_menu/_configuration',
   name: 'add_social_providers_link_configuration_menu',
   insert_bottom: '[data-hook="admin_configurations_sidebar_menu"]',
-  text: '<%= configurations_sidebar_menu_item Spree.t(:social_authentication_methods), spree.admin_authentication_methods_path %>'
+  text: '<%= configurations_sidebar_menu_item(Spree.t(:social_authentication_methods), spree.admin_authentication_methods_path) if can?(:manage, Spree::SocialConfiguration) %>'
 )

lib/spree_social/engine.rb

@@ -30,6 +30,8 @@ def self.activate
       Dir.glob(File.join(File.dirname(__FILE__), '../../app/**/*_decorator*.rb')) do |c|
         Rails.configuration.cache_classes ? require(c) : load(c)
       end
+
+      Spree::Ability.register_ability(Spree::SocialAuthenticationAbilities)
     end
 
     config.to_prepare(&method(:activate).to_proc)

spec/models/spree/social_authentication_abilities_spec.rb

@@ -0,0 +1,19 @@
+require 'cancan/matchers'
+
+RSpec.describe Spree::SocialAuthenticationAbilities, type: :model do
+  describe 'social configuration settings' do
+    subject { described_class.new(user) }
+
+    context 'when is ordinal user' do
+      let(:user) { build_stubbed(:user) }
+
+      it { is_expected.not_to be_able_to(:manage, Spree::SocialConfiguration) }
+    end
+
+    context 'when is admin' do
+      let(:user) { build_stubbed(:admin_user) }
+
+      it { is_expected.to be_able_to(:manage, Spree::SocialConfiguration) }
+    end
+  end
+end