Prevent theme installation
This control is now Disable theme installation under POM Tweaks → Themes → Theme controls. On multisite, configure it exclusively in Network Admin → Settings → POM Tweaks; on single-site WordPress, use Settings → POM Tweaks.
The policy applies to all users in its scope, including administrators and super administrators. It changes WordPress permission checks without rewriting roles. Disable the control and save to restore the normal permission checks.
See Restrict theme management for the exact behavior, independent controls, verification and recovery.