The left-hand admin menu builds itself dynamically per user — every link checks the corresponding permission before it's added, so a staff member only ever sees the sections their role actually grants them. It isn't that other sections are hidden-but-reachable; a link for a permission they don't have is simply never rendered. This is why two people with different roles can be looking at very different-looking menus even though they're both logged into the same admin panel.