OK, so I spoke with my developer, here's what he said:
I'm not sure what the user means by "regular users". Our rules are the following (in order of permissions):
The Directory dashboard menu doesn't appear to users without a role (they can't even login) nor it appears to subscribers (the default role).
Contributors can only see their own listings but can't edit them through he dashboard. When they click "Edit" they are taken to the edit page on the frontend.
Authors can only see their own listings but they can edit them through the dashboard (and as such have access to the payment info).
Editors and Administrators can see all of the listings and edit them through the dashboard.
This means that the users he's talking about have, at least, the role of Authors or Editors. If you think we should limit this further to only Administrators, please tell me, but Authors & Editors are allowed to modify pages or posts in standard WP installations.
So can you clarify WHO sees this widget? Is it a user with the Subscriber, Contributor, Editor or Administrator role?