Is plugin access managed by user permissions?
Plugins are managed through a plugin repository which is only available to Confluence administrators. Plugins are implemented at a Global level by administrators and then made available to all Confluence users by default. Limiting access to plugin functionality should be managed at a Space and page access level.