Access rights mismatch - people with rights for "Registrations" see Payments tab, but get Access denied

[vaclavstepan]

Describe the bug
I have a conference with Manual and Bank transfer payment modules enabled.
A person has been granted Access and Registration rights using the Protection/Event protection tabs.
Now, she can enter the Management area and sees two tabs - Payments and Registrations.
But clicking on the Payments tab yields "You are not authorised to manage this event.".

To Reproduce
Steps to reproduce the behavior:

1. Make a conference
2. Enable payments, manual payment and Bank transfer module
3. Make a registration form that results in money to be wired
4. Add a person from accounting department with rights for Registration and explain her that she will handle registration payments.
5. Let the user login and go to the management area.
6. Let the user click Payments
7. Run, Forest, run! Because the "You are not authorised" error will be displayed and the person will get confused.

Expected behavior
The payments tab should not be visible if the person has no right to access it.