Permissions - shortcut is visible only if the user has the right to access named url.

This is alternative approach to issue #1 that, unlike solution in pull request #12 for better or for worse, does not require user input to hide shortcuts and groups that are not accessible by current user.