# Control user(s): ability to use / access to \<iframe\> - how?

**URL:** <https://meta.discourse.org/t/control-user-s-ability-to-use-access-to-iframe-how/277327>\
**Category:** Support\
**Created:** [August 31, 2023, 10:35am UTC](https://meta.discourse.org/t/control-user-s-ability-to-use-access-to-iframe-how/277327 "2023-08-31T10:35:07Z")\
**Posts on this page:** 1\
**Showing post:** 7

<div class="post-metadata">

**Author:** ![lejeczek](https://avatars.discourse-cdn.com/v4/letter/l/edb3f5/32.png) [@lejeczek](https://meta.discourse.org/u/lejeczek)\
**Post date:** [September 17, 2023, 1:36pm UTC](https://meta.discourse.org/t/control-user-s-ability-to-use-access-to-iframe-how/277327/7 "2023-09-17T13:36:49Z")

</div>

> [@Falco](#):
>
> set ` max oneboxes per post` to 0

It does not seem to work for me. I set to 0 yet users created posts with **iframes** do show up as expected, with a frame/player & do play okey.  
Would there be another param/option which overrides this?  
Also, how to understand \* allowed iframes\* in this context?

---

_[View the full topic](https://meta.discourse.org/t/control-user-s-ability-to-use-access-to-iframe-how/277327)._