There is an issue on the dropdown it shows content types even if user doesnt have permissions here is my fix

if (module_invoke(node_get_types('module', $type), 'access', 'create', $type, $user)) {
Fix
if (module_invoke('node_content', 'access', 'create', $type, $user)) {

Let me know it this is ok thanks