Navigation for features enabled for a user as part of Custom roles

In Add ability to read_vulnerability to custom roles (!114734 - merged) we found following problem:

A a custom guest user with read_vulnerability: true, I can visit $GROUP_PATH/$PROJECT_PATH/-/security/vulnerability_report but I cannot navigate to that page from the "Security and Compliance" sidebar. How are custom guest users supposed to find this page? Can we show them the sidebar?

We need to solve, how to render a Navigation for features enabled based on custom roles.

In this specific example, we have Vulnerability Report under Security and Complience menu item (or Secure in a new menu). But the "Custom role user" can access only Vulnerability report from this menu.

How should we approach this?

• Short-term: How to enable Vulnerabilities for users who have it enabled based on Custom roles? We are planning to release this in 16.0.
• Long-term: How to approach this for features in general?