Site administration menu is displayed even though the user does not have permission to view it.

• Type: Bug
• Status: Closed
• Resolution: Won't Fix
• Affects Version/s: 7.2.X, 7.3.X, Master
• Fix Version/s: None
• Component/s: User Management > Roles
• Labels:
  • ee-ts
• Fix Priority: 3

Steps to reproduce

1. Navigate to Control Panel > Role
2. Add a role named "test role"
3. Select Define Permission:Control Panel > Users > Users and Organizations and check all permission
4. Navigate to Control Panel > Users and Organizations
5. Add a user named "user1"
6. Add a user named "user2" and grant "test role"
7. Log in as "user1" and confirm that My Profile and My Dashboard have been created
8. Log in as "user2"
9. Navigate to Control Panel > Users and Organizations and select "user1"
10. Select "General:Profile and Dashboard" and open "Profile" or "Dashboard"

 Actual result
The Site Administration menu, which you do not have permission to use, is displayed.

 Expected result
The site administration menu is not displayed.

Verified on master hash: 7426a6a739b6ca42f7d8ae55a88aa1b0c9112dba