My answer might come late for you, but for the record…
Allowing shortcodes for any other than admins creates a security risk. There are more secure ways.
Create a custom permission role and modify the site code, so that when the author of page/post/forum topic/forum response/what-ever has that permission, the shortcode gets evaluated. You can hone this by limiting the right to certain shortcodes. Lot of work.
Or you download a plugin, that does this for you. While I found a couple, they are no longer maintained (and some even don’t work any longer). From my hint a plugin-writer wrote one, so you might take a spin with it.
DV Shortcode Whitelist
Disclaimer: I am not getting any profits from that plugin.
