In 2.0 we added a simple filter on activities related to Contributions - so that users who do not have "access CiviContribute" permission will not see contribution activity. For this issue, we should generalize this to cover other component-related activities:
- Membership signup and renewal
- Event registration
- CiviMail mailings
- Grants ?