1.make module app forbid unearthed access except from admin

2.override sidebar link when it's object_auth or app_auth.

vendor/built_in_modules/announcement/app/controllers/panel/announcement/back_end/approvals_controller.rb

@@ -3,6 +3,8 @@ class Panel::Announcement::BackEnd::ApprovalsController  < OrbitBackendControlle
   before_filter :is_admin?
   include AdminHelper
   # layout 'admin'
+
+  
   def preview_and_approve
     @bulletin = Bulletin.find params[:bulletin_id]
   end

vendor/built_in_modules/announcement/app/controllers/panel/announcement/back_end/bulletins_controller.rb

@@ -1,5 +1,4 @@
 class Panel::Announcement::BackEnd::BulletinsController < OrbitBackendController
-  include AdminHelper
   include OrbitControllerLib::DivisionForDisable
 
   before_filter :clean_values, :only => [:create, :update]

vendor/built_in_modules/announcement/init.rb

@@ -131,8 +131,7 @@ module Announcement
       context_link 'module_authorization',
                             :link_path=>"admin_module_app_manager_auth_proc_path(ModuleApp.first(conditions: {title: 'Announcement'}))",
                             :priority=>6,
-                            :active_for_app_auth => 'Announcement',
-                            :available_for => [:admin]
+                            :active_for_app_auth => 'Announcement'
     end
   end
 end