Fixes #5503/BZ1102315 - restrict UI interactions to actual permissions.