Is there a way to prevent an AEM author group from being able to INSTALL packages?
They should be able to download them, or build, but not INSTALL.
Typically, INSTALL requires "modify" and/or "delete" permissions. You may remove these for specific paths and still keep the "read" and "create" permissions to build the package and test.
Thank you very much!