You can make a basic GUI Extension for your components (there are some guides to do this)
Then in the js of your extension the code that you need could be something like that:
if (Tridion.UI.UserSettings.getJsonUserSettings(true).User.Data.GroupMemberships.Group)
{
if (Tridion.UI.UserSettings.getJsonUserSettings(true).User.Data.GroupMemberships.Group["@title"].toString().indexOf(YOUR_SECURITY_GROUP) == -1) {
$display.getView().properties.controls.TabControl.disableItem(2)
}
}else{
$display.getView().properties.controls.TabControl.disableItem(2)
}
The line :
$display.getView().properties.controls.TabControl.disableItem(2)
Turns the source tab (with index 2) disabled.