Denying access rights - allows you to manage the prohibition of employee access to information in your OneBox (if access rights allow access to something, then this application works the other way around and sets a ban on access to any information).
You can create groups of rights for each role, and then configure individual denying rights for each created group.
In the rights ban settings, bans are now available for: