A required right analyzer needs to be introduced for UI extensions as UI extensions can contain Velocity code and need different rights depending on the scope.