How to hide src-nat rule but allow dst-rules in web skin?

RouterOS General
1

I would like our customers to be able to login to their router and add port forwards, but I cannot allow them to be able to change the src-nat rule, since that gets dynamically changed with scripting.

Is there a way in web skin to hide certain configuration parts while still allowing access to the menu?

Are we better off building an entire new web interface on a server that only has those features and uses ssh/API? Anyone know of existing software?

Thanks!

2

As you will give them access to firewall part you cannot do it!

3

That’s what I thought, but I was hopeful because the right side of web skinning there is a filter for the different chains. If we could filter by chin, that would fix my problem.