If you enable Matrix-based security and configure a use to disallow tagging, then log in as that user, the
tagging UI is still available to the user. What should happen is that the tagging UI should not be available
to a user configured to disallow tagging.