Where is the container running? If it’s on a remote server you can do it with Linux user level permissions. Basically just make sure their user accounts are not

Where is the container running? If it’s on a remote server you can do it with Linux user level permissions. Basically just make sure their user accounts are not sudoers, make sure they’re not in the docker user group, and make sure docker daemon is not allowing all user groups to access it. (This is the default configuration btw so I’m guessing your users are running as root on the host?)