Readonlyrest audit and hiding kibana:management and readonlyrest_kbn

I think I reproduced the issue. As a user with hidden kibana:management app, I still can see the link in the sidebar.

When I click it, I can navigate to management, but its submenu is empty:

This empty page is a side effect of allowing navigation to management in order to visualize the reporting page, which is reachable through ROR menu:

I think the bug here is simply that the management link in the sidebar is still visible. Will tweak and send you a build.