Even if you disable the terminal tab, users can still run system commands from R with any of these functions, if they have permissions.
- system
- system2
- shell
- shell.exec
I think you should secure your server by setting access permissions per group and adding your user's accounts to those groups.