Your features list states that CACL will deny access to front-end and back-end items.
Will CACL actually hide from view the items the user does not have access to? In other words, if a user is denied access to a particular item, will CACL also hide the associated menu and/or icon?
My goal here is not even show items the user does not have access to.