Merge pull request #1238 from didoda/fix/modules-access-control

Fix modules access control: use BEM roles only

Author: didoda

src/Controller/Component/ModulesComponent.php

@@ -186,8 +186,7 @@ protected function modulesByAccessControl(): void
         if (empty($user) || empty($user->getOriginalData())) {
             return;
         }
-
-        $roles = (array)$user->get('roles');
+        $roles = array_intersect(array_keys($accessControl), (array)$user->get('roles'));
         $modules = (array)array_keys($this->modules);
         $hidden = [];
         $readonly = [];