TYPO3 Core

To clearify the current behavior: without the patch, the module won't show up in the BE user / BE group TCE form but it will be visible to the user!
So actually the module will be always active unless the module checks the access again.
Sidenode: This affects all Extbase modules. There the access is checked again in the bootstrap, leading to an exception when the user tries to load the module.

Committed to trunk rev 9711

The backport for 4.4 does not work for me, since the configureModule function from extbase 1.2 does not return the needed $MCONF['access'] config like it does from TYPO3 4.5 / extbase 1.3
Something like this at the end of the method should do it:

$modconf['access'] = $config['access'];