Subject is kind of misleading. I've already successfully configured UtilDev to restrict to a specific security group in AD. And tested this with a normally non-admin user, adding and then removing them from the AD group.
<snip>
<allow roles="domain\allowed group" />
<snip>
Is there now a way to allow certain people read-only access, while preventing them from modifying data in the web interface? Ie. can see a specific Device, but not be able to modify that Device's custom fields. Or once they have access via AD group, is it all or none?
Thanks