Access only with password?

Is there any way to protect openhab with a login/password?

In my current installation I can manipulate devices under “locations” for instance without beeting logged in. I’d like to prevent users from any access to the devices, if they are not logged in.

Disable the “Implicit User Role” setting in Settings → API Security.

Thanks a lot for the quick help!