diff --git a/packages/web/src/widgets/WidgetContainer.svelte b/packages/web/src/widgets/WidgetContainer.svelte
index a08a52d35..bf970a8dc 100644
--- a/packages/web/src/widgets/WidgetContainer.svelte
+++ b/packages/web/src/widgets/WidgetContainer.svelte
@@ -11,37 +11,38 @@
   import AdminPremiumPromoWidget from './AdminPremiumPromoWidget.svelte';
   import PublicCloudWidget from './PublicCloudWidget.svelte';
   import PrivateCloudWidget from './PrivateCloudWidget.svelte';
+  import hasPermission from '../utility/hasPermission';
 </script>
 
 <DatabaseWidget hidden={$visibleSelectedWidget != 'database'} />
 
-{#if $visibleSelectedWidget == 'file'}
+{#if $visibleSelectedWidget == 'file' && hasPermission('widgets/file')}
   <FilesWidget />
 {/if}
-{#if $visibleSelectedWidget == 'history'}
+{#if $visibleSelectedWidget == 'history' && hasPermission('widgets/history')}
   <HistoryWidget />
 {/if}
-{#if $visibleSelectedWidget == 'archive'}
+{#if $visibleSelectedWidget == 'archive' && hasPermission('widgets/archive')}
   <ArchiveWidget />
 {/if}
-{#if $visibleSelectedWidget == 'plugins'}
+{#if $visibleSelectedWidget == 'plugins' && hasPermission('widgets/plugins')}
   <PluginsWidget />
 {/if}
-{#if $visibleSelectedWidget == 'cell-data'}
+{#if $visibleSelectedWidget == 'cell-data' && hasPermission('widgets/cell-data')}
   <CellDataWidget />
 {/if}
-{#if $visibleSelectedWidget == 'app'}
+{#if $visibleSelectedWidget == 'app' && hasPermission('widgets/app')}
   <AppWidget />
 {/if}
-{#if $visibleSelectedWidget == 'admin'}
+{#if $visibleSelectedWidget == 'admin' && hasPermission('widgets/admin')}
   <AdminMenuWidget />
 {/if}
 {#if $visibleSelectedWidget == 'premium'}
   <AdminPremiumPromoWidget />
 {/if}
-{#if $visibleSelectedWidget == 'cloud-public'}
+{#if $visibleSelectedWidget == 'cloud-public' && hasPermission('widgets/cloud-public')}
   <PublicCloudWidget />
 {/if}
-{#if $visibleSelectedWidget == 'cloud-private'}
+{#if $visibleSelectedWidget == 'cloud-private' && hasPermission('widgets/cloud-private')}
   <PrivateCloudWidget />
 {/if}
diff --git a/packages/web/src/widgets/WidgetIconPanel.svelte b/packages/web/src/widgets/WidgetIconPanel.svelte
index e73bf61c2..6ed7b60f4 100644
--- a/packages/web/src/widgets/WidgetIconPanel.svelte
+++ b/packages/web/src/widgets/WidgetIconPanel.svelte
@@ -110,21 +110,21 @@
       { command: 'settings.show' },
       { command: 'theme.changeTheme' },
       { command: 'settings.commands' },
-      {
+      hasPermission('widgets/app') && {
         text: 'View applications',
         onClick: () => {
           $selectedWidget = 'app';
           $visibleWidgetSideBar = true;
         },
       },
-      {
+      hasPermission('widgets/plugins') && {
         text: 'Manage plugins',
         onClick: () => {
           $selectedWidget = 'plugins';
           $visibleWidgetSideBar = true;
         },
       },
-      {
+      hasPermission('application-log') && {
         text: 'View application logs',
         onClick: () => {
           openNewTab({