User capability rights (role) (tag)

file_mod_allowed

Allows you to disable modifications to any part of the code, such as plugin, theme, or core updates.

user_has_cap

Allows you to remove or add capabilities for an individual user.