Perhaps there should be more administrative roles, with various levels of permissions
I think it is very useful to create a dynamic menu based on the user's role, and put the configuration on the db and not on the sitemap file.
In addition there should also be a authorization system, so that each user can access his area of expertise
