[Bug]: Dashboard shows widgets for group-limited apps

[Raudius]

⚠️ This issue respects the following points: ⚠️

• This is a bug, not a question or a configuration/webserver/proxy issue.
• This issue is not already reported on Github (I've searched it).
• Nextcloud Server is up to date. See Maintenance and Release Schedule for supported versions.
• I agree to follow Nextcloud's Code of Conduct.

Bug description

The dashboard shows and attempts to load data from apps which are group limited, even for users for which it is not enabled.

Steps to reproduce

These steps can be followed for any app which can be group limited and registers a widget to the dashboard.

1. Download and enable the weather app.
2. Limit the app to group Admin
3. Log in with non-admin user and
4. Open dashboard

Weather widget is shown and error is displayed: There was an error getting the weather status information.

Expected behavior

For users who are not allowed to use the app the widget should not be shown.

Installation method

No response

Operating system

No response

PHP engine version

No response

Web server

No response

Database engine version

No response

Is this bug present after an update or on a fresh install?

No response

Are you using the Nextcloud Server Encryption module?

No response

What user-backends are you using?

• Default user-backend (database)
• LDAP/ Active Directory
• SSO - SAML
• Other

Configuration report

No response

List of activated Apps

Enabled:
  - calendar: 3.4.0-alpha.1
  - cloud_federation_api: 1.8.0
  - collectives: 1.1.0
  - comments: 1.15.0
  - contacts: 4.2.0-alpha.1
  - contactsinteraction: 1.6.0
  - dashboard: 7.5.0
  - dav: 1.24.0
  - deck: 1.8.0-beta.0
  - federatedfilesharing: 1.15.0
  - federation: 1.15.0
  - files: 1.20.0
  - files_rightclick: 1.4.0
  - files_sharing: 1.17.0
  - files_trashbin: 1.15.0
  - files_versions: 1.18.0
  - groupfolders: 11.1.0-beta1
  - integration_moodle: 1.0.2
  - logreader: 2.10.0
  - lookup_server_connector: 1.13.0
  - oauth2: 1.13.0
  - provisioning_api: 1.15.0
  - richdocuments: 6.0.0-beta.1
  - settings: 1.7.0
  - sharebymail: 1.15.0
  - systemtags: 1.15.0
  - text: 3.6.0
  - theming: 2.0.0
  - twofactor_backupcodes: 1.14.0
  - updatenotification: 1.15.0
  - user_status: 1.5.0
  - user_usage_report: 1.9.0
  - viewer: 1.9.0
  - weather_status: 1.5.0
  - workflowengine: 2.7.0
Disabled:
  - admin_audit
  - boilerplate_app: 0.0.1-alpha1
  - circles: 25.0.0-alpha.0
  - encryption
  - files_external
  - files_pdfviewer: 2.6.0
  - files_zip
  - profiler: 1.0.0
  - recommendations: 1.3.0
  - tasks: 0.14.4
  - testing
  - user_ldap

Nextcloud Signing status

No response

Nextcloud Logs

No response

Additional info

No response

[blizzz]

Also reproducible with calendar app. The background is that when the widgets are registered, we do not have a user instantiated yet, i.e. all apps widget's are being registered. A check in Dashboard's Manager::lazyLoadPanels() would take care of it. Preparing a PR.