Peter, I am not sure whether I understand your posting correctly: In the Typo3 configuration I already have disallowed the admins to install extensions globally, so they can install only to their own local extension directory. But there they could still install harmful extensions that may jeopardize the server. Jochen