snapsh0t wrote: ↑Today, 15:47
Do your standard users really need to access the NAS desktop at all? File Manager access can easily be replaced by Windows File Explorer on the PC desktop (or Mac equivalent) and there must be an equivalent to Photos available.
Actually, standard users do need NAS desktop permissions for our workflow.
If standard users are completely barred or restricted from logging into the TOS interface, they will no longer be able to use TNAS PC or TNAS Mobile for automated sync features (such as TerraSync and mobile Photo backup).
At that point, access would be strictly limited to local file protocols like SMB (via Windows File Explorer or Mac Finder). That defeats the entire purpose of our setup, as we rely heavily on mobile photo backups and background file synchronization for normal users.
This is why we need a built-in option in TOS 7 to simply hide third-party App Center icons from standard users' main desktop view.
[Edited]
To add to this point, if standard users are granted access to the NAS desktop, all of those extra third-party app icons also show up directly inside the TNAS PC client interface.
Furthermore, from a security and administration standpoint, standard users should not be exposed to internal system apps or server-level diagnostic information (such as the system status widgets or hardware monitor shown in the attached screenshot) on their home screens.

Allowing administrators to curate or filter the desktop app grid per user/group—or simply hiding non-essential App Center packages from non-admin interfaces—would greatly improve security, cleanliness, and the overall user experience for standard accounts in TOS 7.