A user with rights to everything in the Diversion module (HIFIS Modules > Diversion) but without rights to anything in Administration (including Administration > Diversion Workflow Steps).

The Administration menu appears for this user with the option Diversion Workflow Steps. When the user clicks on it, they get a "you don't have rights" error message.

The bug is that the option should not appear in the Administration menu at all.