Disable Functions, Master Password and Change link behaivor

[barart]

Is there any way to disable functions and have a master password? I would like to have a master password that have all options, and also a user password that only have the functions enabled on config, i would like to use this as a read-only file manager for my users (disable config, server info, create files and directory, uploads, shell, portscan, resolve ids, delete, copy, move, compress, zip download, symlink, hardlink, permissions, execute, decompress, edit, rename, get size) hide .files and also i would like that if a file is a .php, .html, .txt (files that are visible on a browser) when click on file it open the direct route it in a new tab instead of download it

Is it possible?