Permissions on MenuSuite objects are ignored (?)

gerdhuebner

Please could someone else verify or deny the following statement:
If a user has no permissions granted on MenuSuite objects, this user can still access the complete Departments page from his/her Role Center.

kine

Each user have access to all menusuites, because the resulting menu is result of applying each menusuite level to previous one. You cannot "skip" some.

gerdhuebner

kine wrote:

..., because the resulting menu is result of applying each menusuite level to previous one...

The same is true for NAV 2009. Indeed, it made only sense to grant a user permissions for all MenuSuites or for no one. But nevertheless, the behavior of NAV 2009 is different concerning permissions on MenuSuite.
In NAV 2009, if a user was granted permissions to (all) MenuSuites only in some companies, this user was automatically prohibited to open other companies, where he had no permissions on MenuSuites for. In NAV 2013, regardless of the permission settings, each user seems to have full access to all MenuSuites in all companies, automatically. May be, when building the department page from MenuSuites, actually the permissions for the current user are ignored...