[development] block visibility by roles (#18018) -- code needs review (again)