pfSense

maybe this can help you : https://redmine.pfsense.org/issues/9252#note-1

Joshua Sign wrote:

maybe this can help you : https://redmine.pfsense.org/issues/9252#note-1

Joshua, Thanks for the suggestion!

I did attempt to lock it down with the "Deny Config Write" permission, with mixed but mostly negative results.

Dashboard:

• Additions or removals of widgets - Clicking a [+] for new widget or [X] to remove existing widget results in a page refresh with no change to Dashboard: Pass
• Stopping/Starting/Restarting a service via Services Widget - Clicking any option next to any service allowed the user to affect the service: Fail

Status > Services:

• Stopping/Starting/Restarting Service - Clicking any option next to any service allowed the user to affect the service: Fail

Starting and stopping services are not config writes, they are state changes. The "Deny Config Write" privilege does exactly what it was designed to do, nothing more.

There is not currently a privilege that will deny a user from performing actions.

Jim Pingle wrote:

There is not currently a privilege that will deny a user from performing actions.

Thanks, that lines up with the behavior/options I was seeing. I'll keep watching this RFE to see if it's adopted.