If we add a restrict-to configuration on a repeater, it is still possible to add and remove items in the repeater :
<!-- Etablissements partenaires --> <cms:repeater name="partnerSchools" initial-size="0"> <label i18n="true">plugin.odf:PLUGINS_ODF_PROGRAM_PARTNER_SCHOOLS</label> <description i18n="true">plugin.odf:PLUGINS_ODF_PROGRAM_PARTNER_SCHOOLS_DESC</description> <cms:add-label i18n="true">plugin.odf:PLUGINS_ODF_PROGRAM_PARTNER_SCHOOLS_ADD</cms:add-label> <cms:del-label i18n="true">plugin.odf:PLUGINS_ODF_PROGRAM_PARTNER_SCHOOLS_DEL</cms:del-label> <cms:metadata name="linkUrl" type="string"> <label i18n="true">plugin.odf:PLUGINS_ODF_PROGRAM_LINK_URL</label> <description i18n="true">plugin.odf:PLUGINS_ODF_PROGRAM_PARTNER_SCHOOLS_LINK_URL_DESC</description> <validation> <regexp>^https?://.*$</regexp> </validation> <restrict-to> <right read-write-direction="write" id="ODF_Rights_Program_Modify_Essential_Fields"/> </restrict-to> </cms:metadata> <cms:metadata name="linkLabel" type="string"> <label i18n="true">plugin.odf:PLUGINS_ODF_PROGRAM_LINK_LABEL</label> <description i18n="true">plugin.odf:PLUGINS_ODF_PROGRAM_PARTNER_SCHOOLS_LINK_DESC</description> <restrict-to> <right read-write-direction="write" id="ODF_Rights_Program_Modify_Essential_Fields"/> </restrict-to> </cms:metadata> <restrict-to> <right read-write-direction="write" id="ODF_Rights_Program_Modify_Essential_Fields"/> </restrict-to> </cms:repeater>