有关插件的权限 || About plug-in permissions

我新增了一个账户里面是能随便添加插件的，但是能否限制用户的权限不让他们乱装，比如我作为管理员确定好这些官方插件和自定义的插件安装完成后，任何人注册登录这些功能都存在，但是普通用户没有新增插件的功能，给限制住。
我安装了后台管理，我看后台也没有此功能，如果在环境变量中更改，那也挺奇怪的得悄悄开开来然后增加了插件，再关闭吗= =...

I have created a new account and can add plug-ins at will, but can I restrict the user's permissions to prevent them from installing them randomly? For example, as an administrator, I have determined that after the installation of these official plug-ins and custom plug-ins is completed, anyone can register and log in. These functions all exist, but ordinary users do not have the ability to add plug-ins, so they are restricted.
I installed the backend management. I see that the backend does not have this function. If you change it in the environment variables, it would be strange to open it quietly and then add the plug-in and then close it = =...

Start by tracing the existing plug-in installation flow and the backend management controls; the issue names no source files or tests. Determine how administrator and ordinary-user permissions are handled, then define how preapproved plug-ins remain available while ordinary users cannot add new ones. Done means the restriction is enforced and its configuration or administration path is clear.