you could uncheck xml_cdr_recording* from the permissions for that user type.
if you want, its more complex, but you can create a new group called cdr_recordings, and then set permission for the xml cdr recordings.
then remove the xml_cdr recordings from groups user and admin
then for the...