A system for controlling access to a user interface of a retail device within a retail environment, comprising: an anti-tampering module located within the retail device and adapted to prevent tampering with a user interface associated with the anti-tampering module; a user-interface access switch within the anti-tampering module adapted to select between a secure source and a non-secure source to access the user interface; and a secure controller within the anti-tampering module adapted to control the user- interface access switch to: select the secure controller to provide secure content to the user interface when the secure controller is in a secure mode; and select the non-secure source to provide non-secure content to the user interface when the secure controller is in a non-secure mode, wherein the secure controller controls the user-interface access switch to control whether the secure content or the non-secure content is provided at the user interface; wherein the secure controller is further adapted to: receive an input request from a non-secure controller associated with the non-secure source; switch to the secure mode if it is in the non-secure mode in response to receiving the input request from the non-secure controller; authorize the input request received from the non-secure controller; deselect the non-secure source to prevent it from providing the non-secure content to the user interface when the secure controller transitions from the non-secure mode to the secure mode; and provide an authorized prompt if the input request received from the non-secure controller is authorized. an anti-tampering module located within the retail device and adapted to prevent tampering with a user interface associated with the anti-tampering module; a user-interface access switch within the anti-tampering module adapted to select between a secure source and a non-secure source to access the user interface; and a secure controller within the anti-tampering module adapted to control the user- interface access switch to: select the secure controller to provide secure content to the user interface when the secure controller is in a secure mode; and select the non-secure source to provide non-secure content to the user interface when the secure controller is in a non-secure mode, wherein the secure controller controls the user-interface access switch to control whether the secure content or the non-secure content is provided at the user interface; wherein the secure controller is further adapted to: receive an input request from a non-secure controller associated with the non-secure source; switch to the secure mode if it is in the non-secure mode in response to receiving the input request from the non-secure controller; authorize the input request received from the non-secure controller; deselect the non-secure source to prevent it from providing the non-secure content to the user interface when the secure controller transitions from the non-secure mode to the secure mode; and provide an authorized prompt if the input request received from the non-secure controller is authorized. select the secure controller to provide secure content to the user interface when the secure controller is in a secure mode; and select the non-secure source to provide non-secure content to the user interface when the secure controller is in a non-secure mode, wherein the secure controller controls the user-interface access switch to control whether the secure content or the non-secure content is provided at the user interface; wherein the secure controller is further adapted to: receive an input request from a non-secure controller associated with the non-secure source; switch to the secure mode if it is in the non-secure mode in response to receiving the input request from the non-secure controller; authorize the input request received from the non-secure controller; deselect the non-secure source to prevent it from providing the non-secure content to the user interface when the secure controller transitions from the non-secure mode to the secure mode; and provide an authorized prompt if the input request received from the non-secure controller is authorized. receive an input request from a non-secure controller associated with the non-secure source; switch to the secure mode if it is in the non-secure mode in response to receiving the input request from the non-secure controller; authorize the input request received from the non-secure controller; deselect the non-secure source to prevent it from providing the non-secure content to the user interface when the secure controller transitions from the non-secure mode to the secure mode; and provide an authorized prompt if the input request received from the non-secure controller is authorized.