RBAC & Admin UI Customization

[jolly haven]

Hi,

1. Is RBAC possible in the Admin UI?
   I was able to restrict backend routes like admin/products (as per docs - https://docs.medusajs.com/v1/modules/users/backend/rbac
   ), but I also want to restrict the frontend — for example, show a custom “Access Denied” page instead of the products view.

2. Can I customize default admin widgets?
   I know I can add custom widgets, but I’d like to modify existing ones — e.g., add an expiry field or rename default labels.

What’s the recommended way to achieve both?

Thanks!

[azure basalt]

Yes use or middleware for this

[jolly haven]

I have tried I can restrict the backend but not the frontend. Can you please provide some code ?

[azure basalt]

Sure