Right now if I only have the 'reader' role, the object store UI still displays for me. If I select the Container tab, there's an exception cascade which logs me out of Horizon entirely.
I don't think we have the ability to provide read-only access to that UI, so we should not show the tab at all.