diff --git a/core/modules/shortcut/src/Form/SwitchShortcutSet.php b/core/modules/shortcut/src/Form/SwitchShortcutSet.php index 376e82a..ec3180c 100644 --- a/core/modules/shortcut/src/Form/SwitchShortcutSet.php +++ b/core/modules/shortcut/src/Form/SwitchShortcutSet.php @@ -250,6 +250,11 @@ public function checkAccess(UserInterface $user = NULL) { return AccessInterface::ALLOW; } + if (!$account->hasPermission('access shortcuts')) { + // The user has no permission to use shortcuts. + return AccessInterface::DENY; + } + if (!$account->hasPermission('switch shortcut sets')) { // The user has no permission to switch anyone's shortcut set. return AccessInterface::DENY;