How hide collections' lists' visibility when they are required for a user inside an extension?

Summary In Directus, API access is actually tied to collection permissions. If you need your extension to access users through the API, you'll need to grant the appropriate collection permissions, which would make the collection visible in the menu. Basic Example a directus_user using the extension which will read the collection to know if a user already exists and if not create it, should, in some cases, not be able to see the users' list. Motivation Allow the user only to interact with the extension, not the regular Directus UI Detailed Design Have API endpoint permissions separated from collection permissions. Requirements List Must Have: • A • B Should Have: • C Could Have: • D Won't Have: • E Drawbacks A malicious user could extract the whole users' list Alternatives • Hide the menu with CSS (awful solution) • Have the operations done not in the extension but inside flows (require to redi…