Actual behavior

Normal user (no org admin or community admin) has button Add mailing list on mailing list index

Expected behavior

This button shouldn't be there since ACL blocks the user from using the functionality

Reproduction scenario

Create a user without these permissions, go to mailing lists index, click on the add mailing list button if you also want to get the error modal.

Version

1.25