I make a user role that needs to create a configurable product, to do this I need to give him the ACL for Store/Attribute/product.
But I don't want to let him create / add / delete an attribute, so I remove the create new attribute button in the configuration panel.
There is still one problem, the user can go to Store > Attribute > Product menu.
How can I make it invisible for my user role?