6.1.20 EE GA2, 6.2.0 CE M4
When you remove permissions to access to the portlet My account from Role User, the links in dockbar and login-portlet are displayed although the user has not permission.
Steps to reproduce:
1. Configure My account portlet with <add-default-resource>false</add-default-resource> in liferay-portlet.xml in order to prevent a dynamic adition to a page.
2. Starts the server, Login with admin, and go to Control Panel -> Roles -> and define permissions for role "User", remove all the permission.
3. Login with a basic-user.
Results: Login portlet and Dockbar shows the link to My Account although the user is not allowed to access.