I can limit access to custom components by adding a permission name to their menu actions, so that some manager users don’t see it.
However, they are still able to execute the action by using
http://domain.com/manager/?a=nn.
Is there any way to avoid this?
