Description of problem:
Having established a role with limited permissions and assigning to a user, the assigned user will fail to login receiving the error ResourceTypeNotFound in Dashboard#index.

Version-Release number of selected component (if applicable):
Headpin Version: 1.1.7-1.git.80.a08b40a.fc16

Steps to Reproduce:
1. Create user, orgaccess
2. Create role, org:Acme_Corporation, Resource:Organizations, Verb: Read Organizations.
3. Assign role to orgaccess
4. Logout
5. Login as user orgaccess
  
Actual results:
 ResourceTypeNotFound in Dashboard#index

Showing /usr/share/katello/app/views/common/_header.haml where line #12 raised:

Invalid resource type 'system_groups'. Resource Types can be one of 'roles, providers, activation_keys, users, all, environments, organizations'

Extracted source (around line #12):

9: 
10: = content_for(:tabs) do
11:   - if not current_user.nil?
12:     = render_menu(1)
13: 
14: = content_for(:widgets) do
15:   = hidden_field_tag 'get_notices_url', nil, 'data-url' => notices_get_new_path

Trace of template inclusion: app/views/layouts/katello.haml

Rails.root: /usr/share/katello
Application Trace | Framework Trace | Full Trace

app/models/resource_type.rb:87:in `check_type'
app/models/resource_type.rb:74:in `check'
app/models/user.rb:173:in `allowed_all_tags?'
app/models/user.rb:213:in `allowed_all_tags?'
app/models/system_group.rb:299:in `items'
app/models/system_group.rb:88
app/models/system.rb:167:in `any_readable?'
lib/navigation/systems.rb:35:in `menu_systems_org_list'
app/helpers/menu.rb:70:in `call'
app/helpers/menu.rb:70:in `prune_menu'
app/helpers/menu.rb:67:in `delete_if'
app/helpers/menu.rb:67:in `prune_menu'
app/helpers/menu.rb:76:in `prune_menu'
app/helpers/menu.rb:67:in `delete_if'
app/helpers/menu.rb:67:in `prune_menu'
app/helpers/menu.rb:30:in `render_menu'
app/views/common/_header.haml:12:in `_app_views_common__header_haml__701824947_70233089719660_1096030'
app/views/common/_header.haml:10:in `_app_views_common__header_haml__701824947_70233089719660_1096030'
app/views/layouts/katello.haml:45:in `_app_views_layouts_katello_haml__1375091108_70233089441020_245950'
app/controllers/application_controller.rb:309:in `render_error'
app/controllers/application_controller.rb:307:in `render_error'
app/controllers/application_controller.rb:53:in `__bind_1346177243_891923'
app/controllers/application_controller.rb:566:in `call'
app/controllers/application_controller.rb:566:in `execute_rescue'
app/controllers/application_controller.rb:53:in `__bind_1346177243_891923'

Expected results:
Dashboard, and limited access as defined by the role.

Additional info:
this simply appears to be a case where :widgets may have system_groups still defined and system_groups are not applicable to Headpin (SAM).