When you have the Developer Toolbox installed in JIRA (any version), the link to access it is located in the dropdown menu near to the username.

But when you access the instance using a non-admin user, this link still appears in the dropdown menu and when you access it, it shows a page with the message: "This webpage has a redirect loop".

This link should NOT be available to all users to see.