# Control user(s): ability to use / access to \<iframe\> - how?

**URL:** <https://meta.discourse.org/t/control-user-s-ability-to-use-access-to-iframe-how/277327>\
**Category:** Support\
**Created:** [August 31, 2023, 10:35am UTC](https://meta.discourse.org/t/control-user-s-ability-to-use-access-to-iframe-how/277327 "2023-08-31T10:35:07Z")\
**Posts on this page:** 1\
**Showing post:** 5

<div class="post-metadata">

**Author:** ![Falco](https://sea3.discourse-cdn.com/meta/user_avatar/meta.discourse.org/falco/32/179432_2.png) [@Falco](https://meta.discourse.org/u/Falco)\
**Post date:** [September 1, 2023, 4:23pm UTC](https://meta.discourse.org/t/control-user-s-ability-to-use-access-to-iframe-how/277327/5 "2023-09-01T16:23:21Z")

</div>

> [@lejeczek](#):
>
> I my mind, thing as critical as embedded video content — which even hosts/providers of cannot 100% control themselves, the content of it — should(must) be finely controlled (as all different computer systems I know treat any such/similar critical feature) on per user/group basis.
> 
> So, I’d like tu submit, as a suggestion, as a future enhancement — if Discourse has not contemplated that yet, if no ability for such control in Discourse exists as of today — to include such “hardening” mechanism/technique possibly in near future. I believe many will be grateful for great soft-solution - which Discourse obviously is already - made even better.

To complement the answer by @simon and addressing this specific point, you can set ` max oneboxes per post` to 0 to disable oneboxing as a whole, which will also disable content like videos from Youtube and Vimeo.

---

_[View the full topic](https://meta.discourse.org/t/control-user-s-ability-to-use-access-to-iframe-how/277327)._