I'm scared by the possibility that someone could just run format c: from filebrowser web GUI, is this sort of big problem? Does it have a solution?
I realize that options to change shell, command runners, and list of enabled commands are available to admin. So one possible solution is to not create users with admin rights. But I'd like someone to be able to create users.
Possible solution: divide "Administrator" permission into several specific permissions, e.g. "User Management", "Global Settings".