I have a publishing site in which there are several lists and libraries.

I am displaying some list and libraries on home page and applied XSLT on them to give them desired look and feel.

There is a group called "Readers" which only has READ ONLY rights on site.

They can view the site but problem is they can also directly access the list as follows. I know they only have read only rights so they cannot do anything but still I don't want users be able to access lists directly or shall I say access system pages.

```
http://myserver/Lists/MyList/Allitems.aspx

```

If I give those users RESTRICTED READ rights they they cannot access the lists directly but then they can't browse site either.