You can restrict the access to all the functions of the joomla backend via ACLs configuration on joomla 2.5.
For access restriction inside the HikaShop component backend, you will have to configure the Access level tab of the configuration in the Business edition of HikaShop and that way you will be able to restrict a group of users to only the products and orders.
There is no way for now to manage orders and products form the front end.