- Create two dashboards (Dash1 and Dash2).
- Set Dash1 to limited visibility, Dash2 to "All users".
- Put those dashboard to the top of global menu, first Dash1, then Dash2, and all other items below them.
- Access homepage with user, who cannot see Dash1. Get "You Shall Not Pass: Restricted Dashboard" message.
Note that if the order of dashboards is different, the user can see links only to dashboards he can access, and that's fine.
I don't really know whether that is a bug or just undocumented behavior or something else.
Reproduced just now on test Phacility instance.