diff --git a/administrator/templates/atum/html/layouts/chromes/well.php b/administrator/templates/atum/html/layouts/chromes/well.php
index c9dba9e088f9d..373d1f8839b47 100644
--- a/administrator/templates/atum/html/layouts/chromes/well.php
+++ b/administrator/templates/atum/html/layouts/chromes/well.php
@@ -24,6 +24,7 @@
 	// Permission checks
 	$user    = Factory::getUser();
 	$canEdit = $user->authorise('core.edit', 'com_modules.module.' . $id) && $user->authorise('core.manage', 'com_modules');
+	$canChange  = $user->authorise('core.edit.state', 'com_modules.module.' . $id) && $user->authorise('core.manage', 'com_modules');
 
 	$moduleTag      = $params->get('module_tag', 'div');
 	$bootstrapSize  = (int) $params->get('bootstrap_size', 6);
@@ -37,12 +38,8 @@
 	?>
 	<div class="<?php echo $moduleClass; ?> module-wrapper">
 		<<?php echo $moduleTag; ?> class="card mb-3<?php echo $moduleClassSfx; ?>">
-			<?php if ($canEdit) : ?>
-				<?php $uri = Uri::getInstance(); ?>
-				<?php $url = Route::_('index.php?option=com_modules&task=module.edit&id=' . $id . '&return=' . base64_encode($uri)); ?>
-
+			<?php if ($canEdit || $canChange) : ?>
 				<?php $dropdownPosition = Factory::getLanguage()->isRTL() ? 'left' : 'right'; ?>
-
 				<div class="module-actions dropdown">
 					<a data-toggle="dropdown" aria-haspopup="true" aria-expanded="false" id="dropdownMenuButton-<?php echo $id; ?>">
 						<span class="fa fa-cog"><span class="sr-only">
@@ -50,8 +47,14 @@
 						</span></span>
 					</a>
 					<div class="dropdown-menu dropdown-menu-' . $dropdownPosition . '" aria-labelledby="dropdownMenuButton-<?php echo $id; ?>">
-						<a class="dropdown-item" href="<?php echo $url; ?>"><?php echo Text::_('JACTION_EDIT'); ?></a>
-						<a class="dropdown-item unpublish-module" data-module-id="<?php echo $id; ?>"><?php echo Text::_('JACTION_UNPUBLISH'); ?></a>
+						<?php if ($canEdit) : ?>
+							<?php $uri = Uri::getInstance(); ?>
+							<?php $url = Route::_('index.php?option=com_modules&task=module.edit&id=' . $id . '&return=' . base64_encode($uri)); ?>
+							<a class="dropdown-item" href="<?php echo $url; ?>"><?php echo Text::_('JACTION_EDIT'); ?></a>
+						<?php endif; ?>
+						<?php if ($canChange) : ?>
+							<a class="dropdown-item unpublish-module" data-module-id="<?php echo $id; ?>"><?php echo Text::_('JACTION_UNPUBLISH'); ?></a>
+						<?php endif; ?>
 					</div>
 				</div>
 			<?php endif; ?>