We've run upon an issue with private pages that we can't figure out. We allow users to add portlets if they have the correct role with the correct permission. What I noticed is that, if I took all of the permissions away from a portlet (for instance, Asset Publisher) it looks like it takes it away from the "Add" list, but if the portlet is already on the page, the user can still see it whether they have permission or not. Is there a way to fix this? We will run into issues if a user has a portlet on their private page and we decide to take the view permission away from that portlet. They'll still see it if it's already on their page. As I understand it, a user is an administrator of their site by default, so we may be looking at this the wrong way. I've also noticed that, by default when the portlet is added, Power User is given "View" by default for that instance. I've tried both removing all of the permissions from the portlet in Control Panel -> Plugin Configuration -> Permissions, as well as taking the role that has view permissions away from the user. Any help would be greatly appreciated.
