Joget DX Available for Download
Check out Joget DX, the next generation successor to Joget Workflow for faster, simpler digital transformation.
The most common practice is to list down apps in the App Center only if the user is logged in. To do so, head to the Userview Properties of your app, and locate Permission Type and set it to Logged In User.
As a best practice, the userview should be secure by default. You can set the userview permission as a whole to "Logged In User" before further hardening at each and every userview category, including the hidden ones. An unprotected userview allows anonymous users and even robots (i.e googlebots to cache the page) access the userview when the app is set to published.
"Hide From Menu" under Userview Category does not mean it is not accessible. It is simply not visible to users.
Read more at Permission Control.