I need to stop Imagining the idea of being able to limit the access of users to do anything in the router when they are in “write” group , when i only need them to for example ( only able to change wireless settings ) , not Routing … etc
The User AAA need to have authorization section to confirm every command
allow anything under /interface wireless
block any attempt under /system , /ip services
block attempts to user /interface ethernet disable
… you get the Idea
If this is not existing ( if it is , please point me to the right direction ) then consider it as a Feature Request
This is mainly a user forum. Sometimes MikroTik employees on the forum pick up feature requests
from here, but it is better to send them as mail to support@mikrotik.com so they will be filed and tracked as a
support ticket. When you have a business case for a new feature it will undoubtedly be considered.
