SproutForms: User permissions to edit form settings not being honored
I ran into this as well. I only wanted to client to view the submissions but not edit the actual forms. I don't believe it's a bug they just didn't give it a separate permission.

Here's my workaround:

I edited all three sproutform templates in the _layouts folder.


base.html
elementindex.html
settings.html


I moved 

forms: {
  label: "Forms"|t,
  url: url('sproutforms/forms')
}


within the

if currentUser.can('editSproutFormsSettings')


Now the "Edit Form Settings" permission includes the actual forms.