macOS Please help me with my first mac programming.

I think that by far, the cleanest way to do this is to use separate accounts. If you let a user interface with your computer as an administrator user, there is no way that you're going to be able to lock them out of doing something, short of building an entire security system on top of Mac OS's built in system.

Situations like this are exactly the the reason that separate accounts exist at all. Here's what I would do: Create an Employee account with limited access and then enable Parental Controls and block Employee's web access.

Apple Menu -> System Preferences -> Accounts -> Create a limited account for your employees. (In order to do this, you might have to "click the lock to make changes" and authenticate). While you are there, click Login Options and enable Fast User Switching.

Then, click on your Employee account -> Enable Parental Controls ->Go to Parental Controls -> click the Content tab -> check Only Allow Aaccess to These Websites -> delete all the default websites.

Give the employees the password to the regular account and change the administrator's password to something only you know. Use Fast User Switching to switch to your account when you want to use the computer, and don't forget to log out when you're done.

Edit, I haven't tested this.

I don't know another way to do this. I'm fairly certain it can't be applescripted.

If you don't trust your employees why are you employing them?

If you do trust your employees why do you need to limit them?

How about this way:-

Create an account and disable Safari for that account. Then in something like RealBasic, create your own browser. This sounds like a big job but actually can be done in very few lines of code. In fact one of the tutorials I believe does just this. You can then easily add a password. The browser will won't be very sophisticated though… so it might not be a practical solution.

Another option is to install a proxy server.

b e n