Just add groups="website.group_website_publisher" attribute to the tags you want to hide from public users.

You can use the current functionality of Odoo without changing/adding access rights to Website. The Website module is for using as a public interface. Menu items are removed and added depending on what you require for the public to view. Even if you remove a menu item from the Website the functionality will still be available for users. For example, Blogs Post are accessed in the Knowledge module. Forum and Calendar Events will be found under Messaging.

in menu item like 

<menuitem id="menu_employee_contract" action="action_employee_contract" parent="menu_hr" groups="group_hr_mngr,group_hr_ofcr"/>