diff --git a/addons/website/views/website_templates.xml b/addons/website/views/website_templates.xml
index 8889c16fb64..3b730487d2b 100644
--- a/addons/website/views/website_templates.xml
+++ b/addons/website/views/website_templates.xml
@@ -34,23 +34,25 @@
 
 <template id="layout" name="Main layout" inherit_id="portal.frontend_layout">
     <xpath expr="//html" position="before">
-        <t t-set="editable_in_backend" t-value="edit_in_backend or ('website_published' in main_object.fields_get() and main_object._name != 'website.page')"/>
         <t t-set="html_data" t-value="{
             'lang': lang and lang.replace('_', '-'),
             'data-website-id': website.id if website else None,
             'data-edit_translations': '1' if edit_translations else None,
+            'data-main-object': repr(main_object) if main_object else None,
+            'data-seo-object': repr(seo_object) if seo_object else None,
         }"/>
+        <t t-if="not request.env.user._is_public()" t-set="nothing" t-value="html_data.update({
+            'data-is-published': 'website_published' in main_object.fields_get() and main_object.website_published,
+            'data-can-publish': 'can_publish' in main_object.fields_get() and main_object.can_publish,
+            'data-editable-in-backend': edit_in_backend or ('website_published' in main_object.fields_get() and main_object._name != 'website.page'),
+        })"/>
+        <!-- TODO investigate: data-oe-company-name seems like dead code -->
         <t t-if="editable or translatable" t-set="nothing" t-value="html_data.update({
             'data-editable': '1' if editable else None,
             'data-translatable': '1' if translatable else None,
             'data-view-xmlid': xmlid,
             'data-viewid': viewid,
-            'data-main-object': repr(main_object) if main_object else None,
-            'data-seo-object': repr(seo_object) if seo_object else None,
             'data-oe-company-name': res_company.name,
-            'data-is-published': 'website_published' in main_object.fields_get() and main_object.website_published,
-            'data-can-publish': 'can_publish' in main_object.fields_get() and main_object.can_publish,
-            'data-editable-in-backend': editable_in_backend,
         })"/>
     </xpath>
 
diff --git a/addons/website_sale/static/tests/tours/website_sale_category_page_and_products_snippet.js b/addons/website_sale/static/tests/tours/website_sale_category_page_and_products_snippet.js
new file mode 100644
index 00000000000..306f1a17270
--- /dev/null
+++ b/addons/website_sale/static/tests/tours/website_sale_category_page_and_products_snippet.js
@@ -0,0 +1,59 @@
+/** @odoo-modules */
+
+import tour from 'web_tour.tour';
+import wTourUtils from 'website.tour_utils';
+
+const PRODUCT_CATEGORY_ID = 2;
+
+wTourUtils.registerWebsitePreviewTour('category_page_and_products_snippet_edition', {
+    test: true,
+    url: `/shop/category/${PRODUCT_CATEGORY_ID}`,
+    edition: true,
+}, [
+    Object.assign(wTourUtils.dragNDrop({id: 's_dynamic_snippet_products', name: 'Products'}), {
+        content: "Drag and drop the product snippet inside the category area",
+        run: 'drag_and_drop iframe #category_header',
+    }),
+    {
+        content: "Click on the product snippet to show its options",
+        trigger: 'iframe #category_header .s_dynamic_snippet_products',
+    },
+    {
+        content: "Open category option dropdown",
+        trigger: 'we-select[data-attribute-name="productCategoryId"] we-toggler',
+    },
+    {
+        content: "Choose the option to use the current page's category",
+        trigger: 'we-button[data-select-data-attribute="current"]',
+    },
+    ...wTourUtils.clickOnSave(),
+]);
+
+tour.register('category_page_and_products_snippet_use', {
+    test: true,
+    url: `/shop/category/${PRODUCT_CATEGORY_ID}`,
+}, [
+    {
+        content: "Check that the snippet displays the right products",
+        // Wait for at least one shown product
+        trigger: '#category_header .s_dynamic_snippet_products:has(.o_carousel_product_img_link)',
+        run: function (actions) {
+            // Note: this could be more robust to not rely on demo data and
+            // make sure that the newest products are not by chance all of
+            // the second category (used for the test) and ... but should be ok.
+            const productGridEl = this.$anchor[0].closest('#products_grid');
+            const regex = new RegExp(`^/shop/[\\w-/]+-(\\d+)\\?category=${PRODUCT_CATEGORY_ID}$`);
+            const allPageProductIDs = [...productGridEl.querySelectorAll('.oe_product_image_link')]
+                .map(el => el.getAttribute('href').match(regex)[1]);
+
+            const $shownProductLinks = this.$anchor.find('.o_carousel_product_img_link');
+            const regex2 = new RegExp(`^/shop/[\\w-/]+-(\\d+)(?:#attr=\\d*)?$`);
+            for (const shownProductLinkEl of $shownProductLinks) {
+                const productID = shownProductLinkEl.getAttribute('href').match(regex2)[1];
+                if (!allPageProductIDs.includes(productID)) {
+                    console.error(`The snippet displays a product (${productID}) which does not belong to the current category (${allPageProductIDs})`);
+                }
+            }
+        },
+    },
+]);
diff --git a/addons/website_sale/static/tests/tours/website_sale_restricted_editor_ui.js b/addons/website_sale/static/tests/tours/website_sale_restricted_editor_ui.js
new file mode 100644
index 00000000000..ac79218ecfe
--- /dev/null
+++ b/addons/website_sale/static/tests/tours/website_sale_restricted_editor_ui.js
@@ -0,0 +1,43 @@
+/** @odoo-modules */
+
+import wTourUtils from 'website.tour_utils';
+
+wTourUtils.registerWebsitePreviewTour('website_sale_restricted_editor_ui', {
+    test: true,
+    url: `/shop`,
+}, [
+    {
+        content: "Open the site menu to check what is inside",
+        trigger: '[data-menu-xmlid="website.menu_site"]',
+    },
+    {
+        // Not very robust but still nice to have an extra check as this is the
+        // main purpose of this tour
+        content: "First check the user is not a designer",
+        trigger: '.dropdown-menu:has([data-menu-xmlid="website_sale.menu_product_pages"]):not(:has([data-menu-xmlid="website.menu_website_pages_list"]))',
+    },
+    {
+        content: "Ensure the publish and 'edit-in-backend' buttons are not shown",
+        trigger: '.o_menu_systray:not(:has(.o_switch_danger_success)):not(:has(.o_website_edit_in_backend))',
+        // Wait for the possibility to edit to appear
+        extra_trigger: '.o_menu_systray .o_edit_website_container a',
+    },
+    {
+        content: "Navigate to the first product",
+        trigger: 'iframe .oe_product_image_link',
+    },
+    {
+        content: "Click on publish/unpublish",
+        trigger: '.o_menu_systray_item .o_switch_danger_success:has(input:checked)',
+    },
+    {
+        content: "Click on edit-in-backend",
+        trigger: '.o_menu_systray .o_website_edit_in_backend a',
+        extra_trigger: '.o_menu_systray_item:not([data-processing]) .o_switch_danger_success:has(input:not(:checked))',
+    },
+    {
+        content: "Check that you landed on a form view and that the record was unpublished",
+        trigger: '.o_form_sheet [name="is_published"] .fa-globe.text-danger',
+        run: () => {},
+    },
+]);
diff --git a/addons/website_sale/tests/test_website_editor.py b/addons/website_sale/tests/test_website_editor.py
index 2c4ebf7e012..e6dc86dc08d 100644
--- a/addons/website_sale/tests/test_website_editor.py
+++ b/addons/website_sale/tests/test_website_editor.py
@@ -1,6 +1,7 @@
 # -*- coding: utf-8 -*-
 # Part of Odoo. See LICENSE file for full copyright and licensing details.
 
+from odoo import Command
 from odoo.addons.website_sale.controllers.main import WebsiteSale
 from odoo.addons.website.tools import MockRequest
 from odoo.exceptions import ValidationError
@@ -184,3 +185,29 @@ class TestProductPictureController(HttpCase):
                     images[1].id,
                     'first',
                 )
+
+
+@tagged('post_install', '-at_install')
+class TestWebsiteSaleEditor(HttpCase):
+    @classmethod
+    def setUpClass(cls):
+        super().setUpClass()
+
+        cls.env['res.users'].create({
+            'name': 'Restricted Editor',
+            'login': 'restricted',
+            'password': 'restricted',
+            'groups_id': [Command.set([
+                cls.env.ref('base.group_user').id,
+                cls.env.ref('sales_team.group_sale_manager').id,
+                cls.env.ref('website.group_website_restricted_editor').id
+            ])]
+        })
+
+    def test_category_page_and_products_snippet(self):
+        SHOP_CATEGORY_ID = 2
+        self.start_tour(self.env['website'].get_client_action_url(f'/shop/category/{SHOP_CATEGORY_ID}'), 'category_page_and_products_snippet_edition', login='restricted')
+        self.start_tour(f'/shop/category/{SHOP_CATEGORY_ID}', 'category_page_and_products_snippet_use', login=None)
+
+    def test_website_sale_restricted_editor_ui(self):
+        self.start_tour(self.env['website'].get_client_action_url('/shop'), 'website_sale_restricted_editor_ui', login='restricted')