# SOLVED: Element panel shortcuts expose style groups to roles with “Access content” only (2.4.3)

**URL:** <https://forum.bricksbuilder.io/t/solved-element-panel-shortcuts-expose-style-groups-to-roles-with-access-content-only-2-4-3/40666>\
**Category:** Bugs\
**Tags:** v2-4-3\
**Created:** [October 21, 2026, 7:01am UTC](https://forum.bricksbuilder.io/t/solved-element-panel-shortcuts-expose-style-groups-to-roles-with-access-content-only-2-4-3/40666 "2026-10-21T07:01:19Z")\
**Posts on this page:** 4\
**Page:** 1

<div class="post-metadata">

**Author:** ![Psychopomp](https://forum.bricksbuilder.io/letter_avatar_proxy/v4/letter/p/cc9497/32.png) [@Psychopomp](https://forum.bricksbuilder.io/u/Psychopomp)\
**Post date:** [October 21, 2026, 7:01am UTC](https://forum.bricksbuilder.io/t/solved-element-panel-shortcuts-expose-style-groups-to-roles-with-access-content-only-2-4-3/40666/1 "2026-10-21T07:01:19Z")

</div>

**Bricks version:** 2.4.3

**Description**  
The element panel shortcut bar shows the style groups (Layout, Typography, Background, Border, Gradient, Shape dividers, Transform, CSS, Attributes) to users who have the permission “Access content (HTML) settings” but **not** “Access style (CSS) settings”. Users can open these groups and edit settings they shouldn’t have access to.

**Steps to reproduce**

1. Bricks → Settings → Builder access: create a custom capability with `access_element_content` enabled and `access_element_styles` disabled.
2. Assign it to the Editor role.
3. Log in as Editor, open a page in the builder, select an element.
4. Use the shortcut bar on the left side of the element panel → e.g. Transform or Attributes is accessible and editable.

**Expected**  
Only the Content shortcut is shown. Style group shortcuts require `access_element_styles`.

**Actual**  
All style group shortcuts are shown.

**Cause** (`assets/js/main.min.js`, computed `shortcuts`)  
The style groups are pushed under the check for `access_element_content`. It should be `access_element_styles`:

`this.$_userHasPermission("access_element_content") && (`  
`n.push({ group: "_layout", ... }),`  
`...`  
`n.push({ group: "_attributes", ... })`  
`)`

**Related**  
These permissions seem to be enforced only in the builder UI. When saving, I couldn’t find a server-side check for `access_element_styles` in `includes/ajax.php`, so any style change made through this gap is saved to the database.

---

<div class="post-metadata">

**Author:** ![Psychopomp](https://forum.bricksbuilder.io/letter_avatar_proxy/v4/letter/p/cc9497/32.png) [@Psychopomp](https://forum.bricksbuilder.io/u/Psychopomp)\
**Post date:** [October 22, 2026, 7:01am UTC](https://forum.bricksbuilder.io/t/solved-element-panel-shortcuts-expose-style-groups-to-roles-with-access-content-only-2-4-3/40666/3 "2026-10-22T07:01:39Z")

</div>

@timmse @Matej Can you confirm this? I would like to hand out a website to a customer but won’t do so as long as this hasn’t been fixed.

---

<div class="post-metadata">

**Author:** ![timmse](https://forum.bricksbuilder.io/user_avatar/forum.bricksbuilder.io/timmse/32/1192_2.png) [@timmse](https://forum.bricksbuilder.io/u/timmse)\
**Post date:** [October 22, 2026, 9:25am UTC](https://forum.bricksbuilder.io/t/solved-element-panel-shortcuts-expose-style-groups-to-roles-with-access-content-only-2-4-3/40666/5 "2026-10-22T09:25:24Z")

</div>

Thanks for reporting this. We’ve confirmed that the quick access bar exposes style groups to users with content-only access. We’ll update this thread once it’s fixed.

---

<div class="post-metadata">

**Author:** ![bricks.assistant](https://forum.bricksbuilder.io/user_avatar/forum.bricksbuilder.io/bricks.assistant/32/32537_2.png) [@bricks.assistant](https://forum.bricksbuilder.io/u/bricks.assistant)\
**Post date:** [October 28, 2026, 11:42am UTC](https://forum.bricksbuilder.io/t/solved-element-panel-shortcuts-expose-style-groups-to-roles-with-access-content-only-2-4-3/40666/6 "2026-10-28T11:42:27Z")

</div>

We’ve addressed this in Bricks 2.4.4, now available as a one-click update in your WordPress Dashboard.

Please read the [changelog entry](https://bricksbuilder.io/release/bricks-2-4-4/) before updating, and let us know if you experience any issues.