PluginMenuItem with permission is still clickable

[kuzmik]

Environment

• Python version: 3.8.5
• NetBox version: 2.9.1

Steps to Reproduce

1. Install (or create) a plugin with a PluginMenuItem that has permissions set on it
2. Make sure your current user doesn't have the permission that the menu item requires
3. Click the "Plugins" drop down; the link will be grey but still have an href
4. Click the greyed out menu item

Expected Behavior

I expected the link not to be clickable

Observed Behavior

Clicking the link directed me to the correct page. I've added the PermissionRequiredMixin to the view, and that handles it, but I assumed the greyed out link would not be clickable.

Not a huge deal since I included the mixin, but I am concerned that my readonly users will load up the page and file "why does this page say I don't have access" tickets.