Please add some SQL_VIEW permission to allow users to use the SQL tab without having TRAC_ADMIN permission. SQL_ADMIN would not make sense as the SQL tab only allows reading for now, so SQL_VIEW should be the only permission for this plugin.