In a restricted environment (using kiosk capabilities), it can be handy to restrict the use of some apllications, so not allowing to start xfrun for some users might be needed. Attaching a simple patch.
Created attachment 1625 Add kiosk capability
This doesn't really make sense. The correct action here is to just not let the user run xfrun4 at all. If the user can run arbitrary commands, they could run a terminal or some other program that will let them run other commands. Unless I'm misunderstanding your intent?
I guess you're right. It was probably more a first step to a fully restricted environment in my mind (which would need more changes system-wide anyway).
Mmm. Kiosk mode should be mostly going away anyway, in favor of locked Xfconf properties in 4.6.