It is possible to prevent users from taking configuration changes via the WebGUI.
Each configuration file has the following parameter, which has to be set to true.
default
<entry key="Common.LockGUISave">false</entry>
Lock active
<entry key="Common.LockGUISave">true</entry>
When the value is set to true, no configuration changes can be made via the WebGUI anymore.