Disable Install/Uninstall Extension

Hi,

Even though at System -> Users -> User Groups, I've un-ticked the user's specific extension access and modify permission, I still can install or uninstall the extension. Is it suppose to behave this way? Please advise. Thanks.

No, should not be able to, but can.

The bit that stops them is acutally "extension/module" but this stops ALL modules being installed/uninstalled/edited.

Thanks! I found that un-tick this extension/extension/module modify permission does the trick!

If you uneed more granular control (per module) then you can do it by updating the ../extension/controller/module.php file validation function.