Sitecore EXM Security Issues

Question

Hide the create list column in the sitecore exm for particular users.

We tried to add restrictions in core database the text is hiding still it showing the icon. Is there any way to hide the icon also.

Answer 1

Maybe I'm wrong but I'm afraid that what you want to achieve is not possible.

The items which you changed access rights to are only HyperlinkButton Parameters item and Text Parameters item which means they hold text of the button, click action and help text.

The whole button consist of more components:

In frontend, I would use Sitecore personalization rules to hide certain components for chosen users. But it's Sitecore backend and from what I remember, personalization rules are not even executed there.

I tried to use Sitecore Rocks plugin to hide rendering with where true (action always executed) rule but it changed nothing.

And the image which is displayed comes from another component and links to a Sitecore icon. I downloaded the icon, uploaded it to media library, removed read access rights for an user and changed the image url to ID of the uploaded media library item, and that was the only way to hide an image which worked for me. But I could still see empty space there:

I don't like the solution. It's hacky and it doesn't look good. But it's the only one I found.