Steps to reproduce:
1. Create a new user
2. Log in with this user
3. Move the mouse over any portlet
Expected behavior: The portlet header is not displayed, because the user has permissions neither to config the portlet nor to add new content.
Current behavior: The portlet header is displayed.