Probably unrelated comment: note the answer in the related question is not quite correct. This is because removing a button (visual component) has no effect on the controller that handles the action fired by the button. For example, suppose you want to restrict access to the /users page... removing all links in your site to that page won't actually hide it