Hi Plaban,
Objects S_DEVELOP or S_WDR_P13N can be used to restrict users from entering the customizing mode on appending &sap-config-mode=X to the URL.
Ensure that the end users are restricted for these objects so that they do not enter the customizing mode.
Kindly check and let us know if this works.
Regards,
Manju