Description of problem:
I created some customized roles and assigned them to a user.  But when I tried to perform some action for which I don't have necessary privileges, I got a permission denied message under systems tab. And this hides other tabs.

Here are couple of examples to reproduce.

Ex:1
=====
1. Create a role with following permissions and assign this role to a user eg newuser

Permissions for User 
- Access user
- Update user

Permissions for Roles:
- Access roles
- Update roles


2. When you login with 'newuser', you will get 3 tabs ( see attachment1 [details])
- Dashboard
- Systems
- Administration

if you click on systems tab you will get the permission denied message. and this hides the administration tab. (see attachement2)

Ideally in this case, systems tab should not appear because I didn't choose any permission related to system.


Ex2:
====

Create a role with following permissions and assign this role to a newuser:

Permission for org:
 - access organization
 - access systems

Permissions for Environment:
 - Access Changeset in Env
 - Access env contents
 - Access systems in Env

Permissions for Provider:
 - Access provider

Permissions for users:
 - Access users


Now if you click on 'Content Management' ==> 'promotions'; you will get a permission denied message under 'systems' tab.

Ideally 'permission denied' msg should be displayed under 'promotion' tab instead of systems tab and should not hide other tabs.


Version-Release number of selected component (if applicable):
katello-0.1.75-1.git.41.2e9f377.fc15.noarch

How reproducible:
always

Steps to Reproduce:

  
Actual results:


Expected results:
For all unauthorized operations 'permission denied' message should appear under respective tabs instead of systems tab and shouldn't hide other tabs

Additional info: