User bypassing the show_if rule of a view without using the url

[henrique_vieira]

In the app there are three menus that can be accessed from the bottom, two of them are unique to a user using the show_if rule.

I understand that even with the rule, users would be able to access via a url, but some users are getting it in another way: open any form on the app, refresh the page in the browser (F5) and then click cancel in the form. The application will take the user to another view, which is usually the one with the show_if rule.

Is there any way to keep the menus at the bottom and prevent exploitation of this bug? I have already implemented security filters, but I would like to prevent users from accessing the menu anyway.