I don't want my client to change the configuration, is that possible?

Yes, use the built-in permissions.