An Adobe Commerce developer is asked to restrict access onboth the admin menu item Custom_Reports:
:Financial and the admin pagecustomreport/financial/index attached to the menu. The developer has added the resource Customreports/financial in etc/ael.xml. and the following code on etc/adninhtml/nenu.xml :

Given that const ADMIN_RESOURCE was NOT set on the controller of customreports-financial/index and the secret key is not enabled in the URL which users can access the page?