TYPO3 Core

ShortcutButton has the following isValid method:

 public function isValid()
    {
        $this->preProcess();

        return (
            $this->getBackendUser()->mayMakeShortcut()
            && !empty($this->moduleName)
        );
    }

So if the user isn't allowed to create a shortcut it will throw an exception which is not handled in e.g. EditDocumentController