Please remove the ability for a normal (non-adminstrator) user to use the "Disable Internet" function without a password. It is too easy for the user to lock himself/herself out of Internet since the user cannot enable the Internet connection again without a password except when in "Internet on Quota" mode.
kollo