How to Restrict a Joomla Menu Item by Access Level
Joomla menu items have an Access field that assigns a Viewing Access Level. To restrict a menu item, choose an access level containing only the user groups that should be able to view that item, save the menu item, and test with users inside and outside those groups.
Understand what the Access field controls
A Viewing Access Level answers who may view an item; it is separate from action permissions such as Create or Edit. Joomla's access documentation describes menu items as items with an Access field whose value is checked against the signed-in user's authorized viewing levels.
Choose or create the correct access level
Open Users → Access Levels and inspect the groups included in the level you plan to use. If the existing levels do not match the audience, create a purpose-specific level and include the appropriate groups. Remember that Joomla user groups have parent-child relationships, so group hierarchy can affect the viewing levels a user receives.
Assign the menu item
- Open Menus and select the menu containing the item.
- Open the menu item's title.
- Locate Access.
- Select the intended Viewing Access Level.
- Save the menu item.
Current Joomla help exposes Access as the viewing Access Level for menu items. The exact menu-item type does not change that core viewing-access concept.
Protect the destination too
Restricting a menu item controls whether that navigation item is available to the user; it should not be treated as the only protection for sensitive content. Apply the appropriate Access level to the underlying article, category, component item, or other resource as well. A visitor may reach a resource through another menu item, a direct URL, search, or another extension if the resource itself remains viewable.
Test both sides of the rule
- Use a private browser session as a user whose group belongs to the chosen access level and verify the item is available.
- Sign out or use a user outside that level and verify the item is not available.
- Test the destination directly as both users.
- Check other menu items that point to the same resource.
If the wrong user can still see it
Check every group assigned to the user and the groups included in the Viewing Access Level. A user needs membership in an included group, directly or through group hierarchy, to receive that level. Also distinguish a cached menu display from actual authorization by testing in a clean session and checking any page/CDN cache.
Need More Help with Joomla?
Still having trouble? Open a support ticket with QuantaCade Support and we'll be happy to help where we can.
Support priority is given to QuantaCade products, services, and customers. However, we're also happy to assist fellow Joomla users with general Joomla questions and troubleshooting when possible.
QuantaCade is an independent Joomla extension developer and is not official Joomla support. Some issues involving third-party extensions, hosting environments, server configurations, or other systems outside our development control may be beyond what we're able to resolve.