Because of patch, Mage_Adminhtml_Controller_Action::_isAllowed() changed from a default true to Mage::getSingleton('admin/session')->isAllowed('admin'). Extensions should now override this method in order to work for custom ACL users.
Quick fix is adding the following to ZendeskController.php:
protected function _isAllowed() {
return true;
}
The Zendesk plugin should use proper ACL for this, like: return Mage::getSingleton('admin/session')->isAllowed('ENTER RESOURCE IDENTIFIER HERE');