Hi Ian,
If you look under Administration > Site Settings > Security > Permissions, there is a setting for "Roles NOT allowed to edit feature instance settings"
If you define a role and set it there, then you can put users in that role who should not be able to edit settings and they will not see the settings link.
Hope it helps.
Best,
Joe