e.g. a person has access as "viewer" and is a user for whom certain information should not be available e.g. viewing the password saved in the VPN configuration or the password for wifi or the password for Backup Schedule for ftp. currently you can view the password by clicking on the eye in the password field. If the user would like to see it, a window should appear with information that they need to log in to the admin account etc.

A person with permissions to the site as a "viewer" can always view the saved password Additionally, from the Global View> Firmware> upload firmware window, there is an option to load an image. This needs to be corrected, blocked, etc.