diff --git a/appinfo/info.xml b/appinfo/info.xml
index 886eb0a93..863e4c35b 100644
--- a/appinfo/info.xml
+++ b/appinfo/info.xml
@@ -57,6 +57,11 @@
 		</navigation>
 	</navigations>
 
+	<settings>
+		<admin>OCA\Forms\Settings\Settings</admin>
+		<admin-section>OCA\Forms\Settings\SettingsSection</admin-section>
+	</settings>
+
 	<activity>
 		<filters>
 			<filter>OCA\Forms\Activity\Filter</filter>
diff --git a/appinfo/routes.php b/appinfo/routes.php
index b6a8319bb..8ebe6478b 100644
--- a/appinfo/routes.php
+++ b/appinfo/routes.php
@@ -25,13 +25,25 @@
 
 return [
 	'routes' => [
+		// Internal AppConfig routes
+		[
+			'name' => 'config#getAppConfig',
+			'url' => '/config',
+			'verb' => 'GET'
+		],
+		[
+			'name' => 'config#updateAppConfig',
+			'url' => '/config/update',
+			'verb' => 'POST'
+		],
+
 		// Public Share Link
 		[
 			'name' => 'page#public_link_view',
 			'url' => '/s/{hash}',
 			'verb' => 'GET'
-
 		],
+
 		// Internal views
 		[
 			'name' => 'page#views',
@@ -51,6 +63,7 @@
 			'verb' => 'GET'
 		],
 	],
+
 	'ocs' => [
 		
 		// Forms
diff --git a/lib/Constants.php b/lib/Constants.php
index 6d0763091..f0827e060 100644
--- a/lib/Constants.php
+++ b/lib/Constants.php
@@ -26,6 +26,20 @@
 use OCP\Share\IShare;
 
 class Constants {
+	/**
+	 * Used AppConfig Keys
+	 */
+	public const CONFIG_KEY_ALLOWPERMITALL = 'allowPermitAll';
+	public const CONFIG_KEY_ALLOWPUBLICLINK = 'allowPublicLink';
+	public const CONFIG_KEY_CREATIONALLOWEDGROUPS = 'creationAllowedGroups';
+	public const CONFIG_KEY_RESTRICTCREATION = 'restrictCreation';
+	public const CONFIG_KEYS = [
+		self::CONFIG_KEY_ALLOWPERMITALL,
+		self::CONFIG_KEY_ALLOWPUBLICLINK,
+		self::CONFIG_KEY_CREATIONALLOWEDGROUPS,
+		self::CONFIG_KEY_RESTRICTCREATION
+	];
+
 	/**
 	 * Maximum String lengths, the database is set to store.
 	 */
diff --git a/lib/Controller/ApiController.php b/lib/Controller/ApiController.php
index f88f5e868..f6c9eb9fd 100644
--- a/lib/Controller/ApiController.php
+++ b/lib/Controller/ApiController.php
@@ -40,6 +40,7 @@
 use OCA\Forms\Db\ShareMapper;
 use OCA\Forms\Db\Submission;
 use OCA\Forms\Db\SubmissionMapper;
+use OCA\Forms\Service\ConfigService;
 use OCA\Forms\Service\FormsService;
 use OCA\Forms\Service\SubmissionService;
 
@@ -84,6 +85,9 @@ class ApiController extends OCSController {
 	/** @var SubmissionMapper */
 	private $submissionMapper;
 
+	/** @var ConfigService */
+	private $configService;
+
 	/** @var FormsService */
 	private $formsService;
 
@@ -113,6 +117,7 @@ public function __construct(string $appName,
 								QuestionMapper $questionMapper,
 								ShareMapper $shareMapper,
 								SubmissionMapper $submissionMapper,
+								ConfigService $configService,
 								FormsService $formsService,
 								SubmissionService $submissionService,
 								IL10N $l10n,
@@ -130,6 +135,7 @@ public function __construct(string $appName,
 		$this->questionMapper = $questionMapper;
 		$this->shareMapper = $shareMapper;
 		$this->submissionMapper = $submissionMapper;
+		$this->configService = $configService;
 		$this->formsService = $formsService;
 		$this->submissionService = $submissionService;
 
@@ -242,15 +248,20 @@ public function getForm(int $id): DataResponse {
 	 * @throws OCSForbiddenException
 	 */
 	public function newForm(): DataResponse {
-		$form = new Form();
+		// Check if user is allowed
+		if (!$this->configService->canCreateForms()) {
+			$this->logger->debug('This user is not allowed to create Forms.');
+			throw new OCSForbiddenException();
+		}
 
+		// Create Form
+		$form = new Form();
 		$form->setOwnerId($this->currentUser->getUID());
 		$form->setCreated(time());
 		$form->setHash($this->secureRandom->generate(
 			16,
 			ISecureRandom::CHAR_HUMAN_READABLE
 		));
-
 		$form->setTitle('');
 		$form->setDescription('');
 		$form->setAccess([
@@ -280,6 +291,12 @@ public function cloneForm(int $id): DataResponse {
 			'id' => $id
 		]);
 
+		// Check if user can create forms
+		if (!$this->configService->canCreateForms()) {
+			$this->logger->debug('This user is not allowed to create Forms.');
+			throw new OCSForbiddenException();
+		}
+
 		try {
 			$oldForm = $this->formMapper->findById($id);
 		} catch (IMapperException $e) {
diff --git a/lib/Controller/ConfigController.php b/lib/Controller/ConfigController.php
new file mode 100644
index 000000000..f27a3f276
--- /dev/null
+++ b/lib/Controller/ConfigController.php
@@ -0,0 +1,93 @@
+<?php
+
+declare(strict_types=1);
+/**
+ * @copyright Copyright (c) 2022 Jonas Rittershofer <jotoeri@users.noreply.github.com>
+ *
+ * @author Jonas Rittershofer <jotoeri@users.noreply.github.com>
+ *
+ * @license AGPL-3.0-or-later
+ *
+ * This program is free software: you can redistribute it and/or modify
+ * it under the terms of the GNU Affero General Public License as
+ * published by the Free Software Foundation, either version 3 of the
+ * License, or (at your option) any later version.
+ *
+ * This program is distributed in the hope that it will be useful,
+ * but WITHOUT ANY WARRANTY; without even the implied warranty of
+ * MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE.  See the
+ * GNU Affero General Public License for more details.
+ *
+ * You should have received a copy of the GNU Affero General Public License
+ * along with this program. If not, see <http://www.gnu.org/licenses/>.
+ *
+ */
+
+namespace OCA\Forms\Controller;
+
+use OCA\Forms\Constants;
+use OCA\Forms\Service\ConfigService;
+use OCP\AppFramework\ApiController;
+use OCP\AppFramework\Http;
+use OCP\AppFramework\Http\DataResponse;
+use OCP\IConfig;
+use OCP\ILogger;
+use OCP\IRequest;
+
+class ConfigController extends ApiController {
+	protected $appName;
+
+	/** @var ConfigService */
+	private $configService;
+
+	/** @var IConfig */
+	private $config;
+
+	/** @var ILogger */
+	private $logger;
+
+	public function __construct(string $appName,
+								ConfigService $configService,
+								IConfig $config,
+								ILogger $logger,
+								IRequest $request) {
+		parent::__construct($appName, $request);
+		$this->appName = $appName;
+		$this->configService = $configService;
+		$this->config = $config;
+		$this->logger = $logger;
+	}
+
+	/**
+	 * Get the current AppConfig
+	 * @return DataResponse
+	 */
+	public function getAppConfig(): DataResponse {
+		return new DataResponse($this->configService->getAppConfig());
+	}
+
+	/**
+	 * Update values on appConfig.
+	 * Admin required, thus not checking separately.
+	 *
+	 * @param string $configKey AppConfig Key to store
+	 * @param mixed $configValues Corresponding AppConfig Value
+	 *
+	 */
+	public function updateAppConfig(string $configKey, $configValue): DataResponse {
+		$this->logger->debug('Updating AppConfig: {configKey} => {configValue}', [
+			'configKey' => $configKey,
+			'configValue' => $configValue
+		]);
+
+		// Check for allowed keys
+		if (!in_array($configKey, Constants::CONFIG_KEYS)) {
+			return new DataResponse('Unknown appConfig key: ' . $configKey, Http::STATUS_BAD_REQUEST);
+		}
+
+		// Set on DB
+		$this->config->setAppValue($this->appName, $configKey, json_encode($configValue));
+
+		return new DataResponse();
+	}
+}
diff --git a/lib/Controller/PageController.php b/lib/Controller/PageController.php
index 2bc19f131..3f293a4ae 100644
--- a/lib/Controller/PageController.php
+++ b/lib/Controller/PageController.php
@@ -30,6 +30,7 @@
 use OCA\Forms\Db\Form;
 use OCA\Forms\Db\FormMapper;
 use OCA\Forms\Db\ShareMapper;
+use OCA\Forms\Service\ConfigService;
 use OCA\Forms\Service\FormsService;
 
 use OCP\Accounts\IAccountManager;
@@ -64,15 +65,18 @@ class PageController extends Controller {
 	/** @var ShareMapper */
 	private $shareMapper;
 
+	/** @var ConfigService */
+	private $configService;
+
 	/** @var FormsService */
 	private $formsService;
 
 	/** @var IAccountManager */
 	protected $accountManager;
-	
+
 	/** @var IGroupManager */
 	private $groupManager;
-	
+
 	/** @var IInitialStateService */
 	private $initialStateService;
 
@@ -98,6 +102,7 @@ public function __construct(string $appName,
 								IRequest $request,
 								FormMapper $formMapper,
 								ShareMapper $shareMapper,
+								ConfigService $configService,
 								FormsService $formsService,
 								IAccountManager $accountManager,
 								IGroupManager $groupManager,
@@ -113,6 +118,7 @@ public function __construct(string $appName,
 
 		$this->formMapper = $formMapper;
 		$this->shareMapper = $shareMapper;
+		$this->configService = $configService;
 		$this->formsService = $formsService;
 
 		$this->accountManager = $accountManager;
@@ -137,6 +143,7 @@ public function index(): TemplateResponse {
 		Util::addStyle($this->appName, 'forms');
 		$this->insertHeaderOnIos();
 		$this->initialStateService->provideInitialState($this->appName, 'maxStringLengths', Constants::MAX_STRING_LENGTHS);
+		$this->initialStateService->provideInitialState($this->appName, 'appConfig', $this->configService->getAppConfig());
 		return new TemplateResponse($this->appName, self::TEMPLATE_MAIN);
 	}
 
diff --git a/lib/Controller/ShareApiController.php b/lib/Controller/ShareApiController.php
index 3dd19431d..5db2276df 100644
--- a/lib/Controller/ShareApiController.php
+++ b/lib/Controller/ShareApiController.php
@@ -31,6 +31,7 @@
 use OCA\Forms\Db\FormMapper;
 use OCA\Forms\Db\Share;
 use OCA\Forms\Db\ShareMapper;
+use OCA\Forms\Service\ConfigService;
 use OCA\Forms\Service\FormsService;
 
 use OCP\AppFramework\OCSController;
@@ -59,6 +60,9 @@ class ShareApiController extends OCSController {
 	/** @var ShareMapper */
 	private $shareMapper;
 
+	/** @var ConfigService */
+	private $configService;
+
 	/** @var FormsService */
 	private $formsService;
 
@@ -80,6 +84,7 @@ class ShareApiController extends OCSController {
 	public function __construct(string $appName,
 								FormMapper $formMapper,
 								ShareMapper $shareMapper,
+								ConfigService $configService,
 								FormsService $formsService,
 								IGroupManager $groupManager,
 								ILogger $logger,
@@ -91,6 +96,7 @@ public function __construct(string $appName,
 		$this->appName = $appName;
 		$this->formMapper = $formMapper;
 		$this->shareMapper = $shareMapper;
+		$this->configService = $configService;
 		$this->formsService = $formsService;
 		$this->groupManager = $groupManager;
 		$this->logger = $logger;
@@ -125,6 +131,12 @@ public function newShare(int $formId, int $shareType, string $shareWith = ''): D
 			throw new OCSBadRequestException('Invalid shareType');
 		}
 
+		// Block LinkShares if not allowed
+		if ($shareType === IShare::TYPE_LINK && !$this->configService->getAllowPublicLink()) {
+			$this->logger->debug('Link Share not allowed.');
+			throw new OCSForbiddenException('Link Share not allowed.');
+		}
+
 		try {
 			$form = $this->formMapper->findById($formId);
 		} catch (IMapperException $e) {
diff --git a/lib/Service/ConfigService.php b/lib/Service/ConfigService.php
new file mode 100644
index 000000000..86d486b4d
--- /dev/null
+++ b/lib/Service/ConfigService.php
@@ -0,0 +1,137 @@
+<?php
+
+declare(strict_types=1);
+/**
+ * @copyright Copyright (c) 2022 Jonas Rittershofer <jotoeri@users.noreply.github.com>
+ *
+ * @author Jonas Rittershofer <jotoeri@users.noreply.github.com>
+ *
+ * @license AGPL-3.0-or-later
+ *
+ * This program is free software: you can redistribute it and/or modify
+ * it under the terms of the GNU Affero General Public License as
+ * published by the Free Software Foundation, either version 3 of the
+ * License, or (at your option) any later version.
+ *
+ * This program is distributed in the hope that it will be useful,
+ * but WITHOUT ANY WARRANTY; without even the implied warranty of
+ * MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE.  See the
+ * GNU Affero General Public License for more details.
+ *
+ * You should have received a copy of the GNU Affero General Public License
+ * along with this program. If not, see <http://www.gnu.org/licenses/>.
+ *
+ */
+
+namespace OCA\Forms\Service;
+
+use OCA\Forms\Constants;
+
+use OCP\IConfig;
+use OCP\IGroup;
+use OCP\IGroupManager;
+use OCP\ILogger;
+use OCP\IUser;
+use OCP\IUserSession;
+
+class ConfigService {
+	protected $appName;
+
+	/** @var IConfig */
+	private $config;
+
+	/** @var IGroupManager */
+	private $groupManager;
+
+	/** @var ILogger */
+	private $logger;
+
+	/** @var IUser */
+	private $currentUser;
+
+	public function __construct(string $appName,
+								IConfig $config,
+								IGroupManager $groupManager,
+								ILogger $logger,
+								IUserSession $userSession) {
+		$this->appName = $appName;
+		$this->config = $config;
+		$this->groupManager = $groupManager;
+		$this->logger = $logger;
+
+		$this->currentUser = $userSession->getUser();
+	}
+
+	/**
+	 * Load the single values, decode, have default values
+	 */
+	public function getAllowPermitAll(): bool {
+		return json_decode($this->config->getAppValue($this->appName, Constants::CONFIG_KEY_ALLOWPERMITALL, "true"));
+	}
+	public function getAllowPublicLink(): bool {
+		return json_decode($this->config->getAppValue($this->appName, Constants::CONFIG_KEY_ALLOWPUBLICLINK, "true"));
+	}
+	private function getUnformattedCreationAllowedGroups(): array {
+		return json_decode($this->config->getAppValue($this->appName, Constants::CONFIG_KEY_CREATIONALLOWEDGROUPS, "[]"));
+	}
+	public function getCreationAllowedGroups(): array {
+		return $this->formatGroupsForMultiselect($this->getUnformattedCreationAllowedGroups());
+	}
+	public function getRestrictCreation(): bool {
+		return json_decode($this->config->getAppValue($this->appName, Constants::CONFIG_KEY_RESTRICTCREATION, "false"));
+	}
+
+	/**
+	 * Provide the full AppConfig
+	 */
+	public function getAppConfig(): array {
+		return [
+			Constants::CONFIG_KEY_ALLOWPERMITALL => $this->getAllowPermitAll(),
+			Constants::CONFIG_KEY_ALLOWPUBLICLINK => $this->getAllowPublicLink(),
+			Constants::CONFIG_KEY_CREATIONALLOWEDGROUPS => $this->getCreationAllowedGroups(),
+			Constants::CONFIG_KEY_RESTRICTCREATION => $this->getRestrictCreation(),
+
+			// Additional, calculated information out of Config
+			'canCreateForms' => $this->canCreateForms()
+		];
+	}
+
+	/**
+	 * Format the stored groups
+	 *
+	 * @param String[] $groups String Array of the groupIds
+	 * @return Array[] Array of GroupObjects
+	 */
+	private function formatGroupsForMultiselect(array $groups): array {
+		$formattedGroups = [];
+		foreach ($groups as $groupId) {
+			$group = $this->groupManager->get($groupId);
+			if ($group instanceof IGroup) {
+				$formattedGroups[] = [
+					'groupId' => $groupId,
+					'displayName' => $group->getDisplayName()
+				];
+			}
+		}
+		return $formattedGroups;
+	}
+
+	/**
+	 * Check if currentUser is allowed to create Forms
+	 * @return bool
+	 */
+	public function canCreateForms(): bool {
+		// Restriction active or not
+		if (!$this->getRestrictCreation()) {
+			return true;
+		}
+
+		$userGroups = $this->groupManager->getUserGroupIds($this->currentUser);
+		// If array intersection is not empty, user is member of any allowed group.
+		if (sizeof(array_intersect($userGroups, $this->getUnformattedCreationAllowedGroups()))) {
+			return true;
+		}
+
+		return false;
+	}
+}
diff --git a/lib/Service/FormsService.php b/lib/Service/FormsService.php
index b3084d5e4..39acebbf3 100644
--- a/lib/Service/FormsService.php
+++ b/lib/Service/FormsService.php
@@ -33,6 +33,7 @@
 use OCA\Forms\Db\Share;
 use OCA\Forms\Db\ShareMapper;
 use OCA\Forms\Db\SubmissionMapper;
+
 use OCP\AppFramework\Db\DoesNotExistException;
 use OCP\AppFramework\Db\IMapperException;
 use OCP\IGroup;
@@ -66,6 +67,9 @@ class FormsService {
 	/** @var SubmissionMapper */
 	private $submissionMapper;
 
+	/** @var ConfigService */
+	private $configService;
+
 	/** @var IGroupManager */
 	private $groupManager;
 
@@ -84,6 +88,7 @@ public function __construct(ActivityManager $activityManager,
 								QuestionMapper $questionMapper,
 								ShareMapper $shareMapper,
 								SubmissionMapper $submissionMapper,
+								ConfigService $configService,
 								IGroupManager $groupManager,
 								ILogger $logger,
 								IUserManager $userManager,
@@ -94,6 +99,7 @@ public function __construct(ActivityManager $activityManager,
 		$this->questionMapper = $questionMapper;
 		$this->shareMapper = $shareMapper;
 		$this->submissionMapper = $submissionMapper;
+		$this->configService = $configService;
 		$this->groupManager = $groupManager;
 		$this->logger = $logger;
 		$this->userManager = $userManager;
@@ -322,7 +328,7 @@ public function hasUserAccess(int $formId): bool {
 		}
 
 		// Now all remaining users are allowed, if permitAll is set.
-		if ($access['permitAllUsers']) {
+		if ($access['permitAllUsers'] && $this->configService->getAllowPermitAll()) {
 			return true;
 		}
 
@@ -356,7 +362,9 @@ public function isSharedFormShown(int $formId): bool {
 		}
 
 		// Shown if permitall and showntoall are both set.
-		if ($access['permitAllUsers'] && $access['showToAllUsers']) {
+		if ($access['permitAllUsers'] &&
+			$access['showToAllUsers'] &&
+			$this->configService->getAllowPermitAll()) {
 			return true;
 		}
 
diff --git a/lib/Settings/Settings.php b/lib/Settings/Settings.php
new file mode 100644
index 000000000..a1da622f8
--- /dev/null
+++ b/lib/Settings/Settings.php
@@ -0,0 +1,89 @@
+<?php
+
+declare(strict_types=1);
+/**
+ * @copyright Copyright (c) 2022 Jonas Rittershofer <jotoeri@users.noreply.github.com>
+ *
+ * @author Jonas Rittershofer <jotoeri@users.noreply.github.com>
+ *
+ * @license AGPL-3.0-or-later
+ *
+ * This program is free software: you can redistribute it and/or modify
+ * it under the terms of the GNU Affero General Public License as
+ * published by the Free Software Foundation, either version 3 of the
+ * License, or (at your option) any later version.
+ *
+ * This program is distributed in the hope that it will be useful,
+ * but WITHOUT ANY WARRANTY; without even the implied warranty of
+ * MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE.  See the
+ * GNU Affero General Public License for more details.
+ *
+ * You should have received a copy of the GNU Affero General Public License
+ * along with this program. If not, see <http://www.gnu.org/licenses/>.
+ *
+ */
+
+namespace OCA\Forms\Settings;
+
+use OCA\Forms\Service\ConfigService;
+use OCP\AppFramework\Http\TemplateResponse;
+use OCP\IGroupManager;
+use OCP\IInitialStateService;
+use OCP\Settings\ISettings;
+use OCP\Util;
+
+class Settings implements ISettings {
+	private $appName;
+
+	/** @var ConfigService */
+	private $configService;
+
+	/** @var IGroupManager */
+	private $groupManager;
+
+	/** @var IInitialStateService */
+	private $initialStateService;
+
+	public function __construct(string $appName,
+								ConfigService $configService,
+								IGroupManager $groupManager,
+								IInitialStateService $initialStateService) {
+		$this->appName = $appName;
+		$this->configService = $configService;
+		$this->groupManager = $groupManager;
+		$this->initialStateService = $initialStateService;
+	}
+
+	/**
+	 * Provide all available Groups
+	 *
+	 * @return Array[] Array of GroupObjects
+	 */
+	private function getAvailableGroups(): array {
+		$formattedGroups = [];
+		$groups = $this->groupManager->search('');
+		foreach ($groups as $group) {
+			$formattedGroups[] = [
+				'groupId' => $group->getGID(),
+				'displayName' => $group->getDisplayName()
+			];
+		}
+		return $formattedGroups;
+	}
+
+	public function getForm(): TemplateResponse {
+		Util::addScript($this->appName, 'forms-settings');
+		$this->initialStateService->provideInitialState($this->appName, 'availableGroups', $this->getAvailableGroups());
+		$this->initialStateService->provideInitialState($this->appName, 'appConfig', $this->configService->getAppConfig());
+
+		return new TemplateResponse($this->appName, 'settings');
+	}
+
+	public function getSection(): string {
+		return 'forms';
+	}
+
+	public function getPriority(): int {
+		return 50;
+	}
+}
diff --git a/lib/Settings/SettingsSection.php b/lib/Settings/SettingsSection.php
new file mode 100644
index 000000000..2bd02e84b
--- /dev/null
+++ b/lib/Settings/SettingsSection.php
@@ -0,0 +1,80 @@
+<?php
+
+declare(strict_types=1);
+/**
+ * @copyright Copyright (c) 2022 Jonas Rittershofer <jotoeri@users.noreply.github.com>
+ *
+ * @author Jonas Rittershofer <jotoeri@users.noreply.github.com>
+ *
+ * @license AGPL-3.0-or-later
+ *
+ * This program is free software: you can redistribute it and/or modify
+ * it under the terms of the GNU Affero General Public License as
+ * published by the Free Software Foundation, either version 3 of the
+ * License, or (at your option) any later version.
+ *
+ * This program is distributed in the hope that it will be useful,
+ * but WITHOUT ANY WARRANTY; without even the implied warranty of
+ * MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE.  See the
+ * GNU Affero General Public License for more details.
+ *
+ * You should have received a copy of the GNU Affero General Public License
+ * along with this program. If not, see <http://www.gnu.org/licenses/>.
+ *
+ */
+
+namespace OCA\Forms\Settings;
+
+use OCP\IL10N;
+use OCP\IURLGenerator;
+use OCP\Settings\IIconSection;
+
+class SettingsSection implements IIconSection {
+
+	/** @var IL10N */
+	private $l10n;
+
+	/** @var IURLGenerator */
+	private $urlGenerator;
+
+	public function __construct(IL10N $l10n, IURLGenerator $urlGenerator) {
+		$this->l10n = $l10n;
+		$this->urlGenerator = $urlGenerator;
+	}
+
+	/**
+	 * Section ID to be used for Setting
+	 *
+	 * @return string
+	 */
+	public function getID(): string {
+		return 'forms';
+	}
+
+	/**
+	 * Translated Name to display
+	 *
+	 * @return string
+	 */
+	public function getName(): string {
+		return $this->l10n->t('Forms');
+	}
+
+	/**
+	 * Priority of the Section. Using Priority here as on Navigationorder.
+	 *
+	 * @return int between 0-99
+	 */
+	public function getPriority(): int {
+		return 77;
+	}
+
+	/**
+	 * Section Icon
+	 *
+	 * @return string Relative Path to the icon
+	 */
+	public function getIcon(): string {
+		return $this->urlGenerator->imagePath('forms', 'forms-dark.svg');
+	}
+}
diff --git a/src/Forms.vue b/src/Forms.vue
index e9660ed22..b50d3a77c 100644
--- a/src/Forms.vue
+++ b/src/Forms.vue
@@ -23,8 +23,11 @@
 
 <template>
 	<Content app-name="forms">
-		<AppNavigation>
-			<AppNavigationNew button-class="icon-add" :text="t('forms', 'New form')" @click="onNewForm" />
+		<AppNavigation v-if="canCreateForms || hasForms">
+			<AppNavigationNew v-if="canCreateForms"
+				button-class="icon-add"
+				:text="t('forms', 'New form')"
+				@click="onNewForm" />
 			<template #list>
 				<!-- Form-Owner-->
 				<AppNavigationCaption v-if="!noOwnedForms" :title="t('forms', 'Your Forms')" />
@@ -48,13 +51,13 @@
 		</AppNavigation>
 
 		<!-- No forms & loading emptycontents -->
-		<AppContent v-if="loading || noForms || !routeHash || !routeAllowed">
+		<AppContent v-if="loading || !hasForms || !routeHash || !routeAllowed">
 			<EmptyContent v-if="loading" icon="icon-loading">
 				{{ t('forms', 'Loading forms …') }}
 			</EmptyContent>
-			<EmptyContent v-else-if="noForms">
+			<EmptyContent v-else-if="!hasForms">
 				{{ t('forms', 'No forms created yet') }}
-				<template #action>
+				<template v-if="canCreateForms" #action>
 					<button class="primary" @click="onNewForm">
 						{{ t('forms', 'Create a form') }}
 					</button>
@@ -62,8 +65,9 @@
 			</EmptyContent>
 
 			<EmptyContent v-else>
-				{{ t('forms', 'Select a form or create a new one') }}
-				<template #action>
+				<span v-if="canCreateForms">{{ t('forms', 'Select a form or create a new one') }}</span>
+				<span v-else>{{ t('forms', 'Please select a form') }}</span>
+				<template v-if="canCreateForms" #action>
 					<button class="primary" @click="onNewForm">
 						{{ t('forms', 'Create new form') }}
 					</button>
@@ -87,8 +91,9 @@
 
 <script>
 import { emit } from '@nextcloud/event-bus'
-import { showError } from '@nextcloud/dialogs'
 import { generateOcsUrl } from '@nextcloud/router'
+import { loadState } from '@nextcloud/initial-state'
+import { showError } from '@nextcloud/dialogs'
 import axios from '@nextcloud/axios'
 
 import AppContent from '@nextcloud/vue/dist/Components/AppContent'
@@ -125,12 +130,14 @@ export default {
 			sidebarActive: 'forms-sharing',
 			forms: [],
 			sharedForms: [],
+
+			canCreateForms: loadState(appName, 'appConfig').canCreateForms,
 		}
 	},
 
 	computed: {
-		noForms() {
-			return this.noOwnedForms && this.noSharedForms
+		hasForms() {
+			return !this.noOwnedForms || !this.noSharedForms
 		},
 		noOwnedForms() {
 			return this.forms?.length === 0
diff --git a/src/FormsSettings.vue b/src/FormsSettings.vue
new file mode 100644
index 000000000..049f81675
--- /dev/null
+++ b/src/FormsSettings.vue
@@ -0,0 +1,165 @@
+<!--
+  - @copyright Copyright (c) 2021 Jonas Rittershofer <jotoeri@users.noreply.github.com>
+  -
+  - @author Jonas Rittershofer <jotoeri@users.noreply.github.com>
+  -
+  - @license AGPL-3.0-or-later
+  -
+  - This program is free software: you can redistribute it and/or modify
+  - it under the terms of the GNU Affero General Public License as
+  - published by the Free Software Foundation, either version 3 of the
+  - License, or (at your option) any later version.
+  -
+  - This program is distributed in the hope that it will be useful,
+  - but WITHOUT ANY WARRANTY; without even the implied warranty of
+  - MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE.  See the
+  - GNU Affero General Public License for more details.
+  -
+  - You should have received a copy of the GNU Affero General Public License
+  - along with this program.  If not, see <http://www.gnu.org/licenses/>.
+  -
+  -->
+
+<template>
+	<div>
+		<SettingsSection :title="t('forms', 'Form creation')">
+			<CheckboxRadioSwitch ref="switchRestrictCreation"
+				:checked.sync="appConfig.restrictCreation"
+				class="forms-settings__creation__switch"
+				type="switch"
+				@update:checked="onRestrictCreationChange">
+				{{ t('forms', 'Restrict form creation to selected groups') }}
+			</CheckboxRadioSwitch>
+			<Multiselect v-model="appConfig.creationAllowedGroups"
+				:disabled="!appConfig.restrictCreation"
+				:multiple="true"
+				:options="availableGroups"
+				:placeholder="t('forms', 'Select groups')"
+				class="forms-settings__creation__multiselect"
+				label="displayName"
+				track-by="groupId"
+				@update:value="onCreationAllowedGroupsChange" />
+		</SettingsSection>
+		<SettingsSection :title="t('forms', 'Form sharing')">
+			<CheckboxRadioSwitch ref="switchAllowPublicLink"
+				:checked.sync="appConfig.allowPublicLink"
+				type="switch"
+				@update:checked="onAllowPublicLinkChange">
+				{{ t('forms', 'Allow sharing by link') }}
+			</CheckboxRadioSwitch>
+			<CheckboxRadioSwitch ref="switchAllowPermitAll"
+				:checked.sync="appConfig.allowPermitAll"
+				type="switch"
+				@update:checked="onAllowPermitAllChange">
+				{{ t('forms', 'Allow sharing to all logged in accounts') }}
+			</CheckboxRadioSwitch>
+		</SettingsSection>
+	</div>
+</template>
+
+<script>
+import { showError } from '@nextcloud/dialogs'
+import { loadState } from '@nextcloud/initial-state'
+import { generateUrl } from '@nextcloud/router'
+import axios from '@nextcloud/axios'
+import CheckboxRadioSwitch from '@nextcloud/vue/dist/Components/CheckboxRadioSwitch'
+import Multiselect from '@nextcloud/vue/dist/Components/Multiselect'
+import SettingsSection from '@nextcloud/vue/dist/Components/SettingsSection'
+
+export default {
+	name: 'FormsSettings',
+
+	components: {
+		CheckboxRadioSwitch,
+		Multiselect,
+		SettingsSection,
+	},
+
+	data() {
+		return {
+			appConfig: loadState(appName, 'appConfig'),
+			availableGroups: loadState(appName, 'availableGroups'),
+		}
+	},
+
+	methods: {
+		/**
+		 * Similar procedures on**Change:
+		 *
+		 * - Show corresponding switch as loading
+		 * - Update value via api
+		 * - Only after everything is done (incl. possible reload on failure), unset loading.
+		 *
+		 * @param {boolean|Array} newVal The resp. new Value to store.
+		 */
+		async onRestrictCreationChange(newVal) {
+			const el = this.$refs.switchRestrictCreation
+			el.loading = true
+			await this.saveAppConfig('restrictCreation', newVal)
+			el.loading = false
+		},
+		async onCreationAllowedGroupsChange(newVal) {
+			const el = this.$refs.switchRestrictCreation
+			el.loading = true
+			await this.saveAppConfig('creationAllowedGroups', newVal.map(group => group.groupId))
+			el.loading = false
+		},
+		async onAllowPublicLinkChange(newVal) {
+			const el = this.$refs.switchAllowPublicLink
+			el.loading = true
+			await this.saveAppConfig('allowPublicLink', newVal)
+			el.loading = false
+		},
+		async onAllowPermitAllChange(newVal) {
+			const el = this.$refs.switchAllowPermitAll
+			el.loading = true
+			await this.saveAppConfig('allowPermitAll', newVal)
+			el.loading = false
+		},
+
+		/**
+		 * Save a key-value pair to the appConfig.
+		 *
+		 * @param {string} configKey The key to store. Must be one of the used configKeys (See php-constants).
+		 * @param {boolean|Array} configValue The value to store.
+		 */
+		async saveAppConfig(configKey, configValue) {
+			try {
+				await axios.post(generateUrl('apps/forms/config/update'), {
+					configKey,
+					configValue,
+				})
+			} catch (error) {
+				console.error(error)
+				showError(t('forms', 'Error while saving configuration'))
+				await this.reloadAppConfig()
+			}
+		},
+
+		/**
+		 * Reload the current AppConfig. Used to restore in case of saving-failure.
+		 */
+		async reloadAppConfig() {
+			try {
+				const resp = await axios.get(generateUrl('apps/forms/config'))
+				this.appConfig = resp.data
+			} catch (error) {
+				console.error(error)
+				showError(t('forms', 'Error while reloading config'))
+			}
+		},
+	},
+}
+</script>
+
+<style lang="scss" scoped>
+.forms-settings {
+	&__creation__switch {
+		margin-bottom: 4px;
+	}
+
+	&__creation__multiselect {
+		width: 100%;
+	}
+}
+</style>
diff --git a/src/components/SidebarTabs/SharingSidebarTab.vue b/src/components/SidebarTabs/SharingSidebarTab.vue
index af7140a66..ee7231606 100644
--- a/src/components/SidebarTabs/SharingSidebarTab.vue
+++ b/src/components/SidebarTabs/SharingSidebarTab.vue
@@ -32,7 +32,7 @@
 			<div class="share-div__avatar icon-public" />
 			<div class="share-div__desc share-div__desc--twoline">
 				<span>{{ t('forms', 'Internal link') }}</span>
-				<span>{{ t('forms', 'Only works for logged in users who can access this form') }}</span>
+				<span>{{ t('forms', 'Only works for logged in accounts with access rights') }}</span>
 			</div>
 			<Actions>
 				<ActionButton icon="icon-clippy" @click="copyInternalShareLink($event, form.hash)">
@@ -42,12 +42,12 @@
 		</div>
 
 		<!-- Public Link -->
-		<div v-if="!hasPublicLink" class="share-div share-div--link">
+		<div v-if="!hasPublicLink && appConfig.allowPublicLink" class="share-div share-div--link">
 			<div class="share-div__avatar icon-public-white" />
-			<span class="share-div__desc">{{ t('forms', 'Public share link') }}</span>
+			<span class="share-div__desc">{{ t('forms', 'Share link') }}</span>
 			<Actions>
 				<ActionButton icon="icon-add" @click="addPublicLink">
-					{{ t('forms', 'Add public link') }}
+					{{ t('forms', 'Add link') }}
 				</ActionButton>
 			</Actions>
 		</div>
@@ -56,7 +56,7 @@
 				:key="'share-' + share.shareType + '-' + share.shareWith"
 				class="share-div share-div--link">
 				<div class="share-div__avatar icon-public-white" />
-				<span class="share-div__desc">{{ t('forms', 'Public Share Link') }}</span>
+				<span class="share-div__desc">{{ t('forms', 'Share link') }}</span>
 				<Actions>
 					<ActionButton icon="icon-clippy" @click="copyPublicShareLink($event, share.shareWith)">
 						{{ t('forms', 'Copy to clipboard') }}
@@ -66,8 +66,11 @@
 					<ActionButton icon="icon-delete" @click="removeShare(share)">
 						{{ t('forms', 'Remove link') }}
 					</ActionButton>
-					<ActionButton :close-after-click="true" icon="icon-add" @click="addPublicLink">
-						{{ t('forms', 'Add public link') }}
+					<ActionButton v-if="appConfig.allowPublicLink"
+						:close-after-click="true"
+						icon="icon-add"
+						@click="addPublicLink">
+						{{ t('forms', 'Add link') }}
 					</ActionButton>
 				</Actions>
 			</div>
@@ -80,7 +83,7 @@
 				<span>{{ t('forms', 'Legacy Link') }}</span>
 				<span>{{ t('forms', 'Form still supports old sharing-link.') }}</span>
 			</div>
-			<div v-tooltip="t('forms', 'For compatibility with the old Sharing, the internal link is still usable as public link. We recommend replacing the link with a new public link.')"
+			<div v-tooltip="t('forms', 'For compatibility with the old Sharing, the internal link is still usable as Share link. We recommend replacing the link with a new Share link.')"
 				class="share-div__legacy-warning icon-error-color" />
 			<Actions>
 				<ActionButton icon="icon-delete" @click="removeLegacyLink">
@@ -90,25 +93,27 @@
 		</div>
 
 		<!-- All users on Instance -->
-		<div class="share-div">
-			<div class="share-div__avatar icon-group" />
-			<label for="share-switch__permit-all" class="share-div__desc">
-				{{ t('forms', 'Permit access to all logged in users') }}
-			</label>
-			<CheckboxRadioSwitch id="share-switch__permit-all"
-				:checked="form.access.permitAllUsers"
-				type="switch"
-				@update:checked="onPermitAllUsersChange" />
-		</div>
-		<div v-if="form.access.permitAllUsers" class="share-div share-div--indent">
-			<div class="share-div__avatar icon-forms" />
-			<label for="share-switch__show-to-all" class="share-div__desc">
-				{{ t('forms', 'Show to all users on sidebar') }}
-			</label>
-			<CheckboxRadioSwitch id="share-switch__show-to-all"
-				:checked="form.access.showToAllUsers"
-				type="switch"
-				@update:checked="onShowToAllUsersChange" />
+		<div v-if="appConfig.allowPermitAll">
+			<div class="share-div">
+				<div class="share-div__avatar icon-group" />
+				<label for="share-switch__permit-all" class="share-div__desc">
+					{{ t('forms', 'Permit access to all logged in accounts') }}
+				</label>
+				<CheckboxRadioSwitch id="share-switch__permit-all"
+					:checked="form.access.permitAllUsers"
+					type="switch"
+					@update:checked="onPermitAllUsersChange" />
+			</div>
+			<div v-if="form.access.permitAllUsers" class="share-div share-div--indent">
+				<div class="share-div__avatar icon-forms" />
+				<label for="share-switch__show-to-all" class="share-div__desc">
+					{{ t('forms', 'Show to all accounts on sidebar') }}
+				</label>
+				<CheckboxRadioSwitch id="share-switch__show-to-all"
+					:checked="form.access.showToAllUsers"
+					type="switch"
+					@update:checked="onShowToAllUsersChange" />
+			</div>
 		</div>
 
 		<!-- Single shares -->
@@ -123,6 +128,7 @@
 
 <script>
 import { generateOcsUrl } from '@nextcloud/router'
+import { loadState } from '@nextcloud/initial-state'
 import { showError } from '@nextcloud/dialogs'
 import axios from '@nextcloud/axios'
 import Actions from '@nextcloud/vue/dist/Components/Actions'
@@ -155,6 +161,7 @@ export default {
 	data() {
 		return {
 			isLoading: false,
+			appConfig: loadState(appName, 'appConfig'),
 		}
 	},
 
diff --git a/src/settings.js b/src/settings.js
new file mode 100644
index 000000000..1c2ea77c5
--- /dev/null
+++ b/src/settings.js
@@ -0,0 +1,35 @@
+/**
+ * @copyright Copyright (c) 2022 Jonas Rittershofer <jotoeri@users.noreply.github.com>
+ *
+ * @author Jonas Rittershofer <jotoeri@users.noreply.github.com>
+ *
+ * @license AGPL-3.0-or-later
+ *
+ * This program is free software: you can redistribute it and/or modify
+ * it under the terms of the GNU Affero General Public License as
+ * published by the Free Software Foundation, either version 3 of the
+ * License, or (at your option) any later version.
+ *
+ * This program is distributed in the hope that it will be useful,
+ * but WITHOUT ANY WARRANTY; without even the implied warranty of
+ * MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE.  See the
+ * GNU Affero General Public License for more details.
+ *
+ * You should have received a copy of the GNU Affero General Public License
+ * along with this program. If not, see <http://www.gnu.org/licenses/>.
+ *
+ */
+import { translate, translatePlural } from '@nextcloud/l10n'
+import Vue from 'vue'
+
+import FormsSettings from './FormsSettings.vue'
+
+Vue.prototype.t = translate
+Vue.prototype.n = translatePlural
+
+export default new Vue({
+	 el: '#forms-settings',
+	 // eslint-disable-next-line vue/match-component-file-name
+	 name: 'FormsSettings',
+	 render: h => h(FormsSettings),
+})
diff --git a/templates/settings.php b/templates/settings.php
new file mode 100644
index 000000000..411d9eda9
--- /dev/null
+++ b/templates/settings.php
@@ -0,0 +1,25 @@
+<?php
+/**
+ * @copyright Copyright (c) 2022 Jonas Rittershofer <jotoeri@users.noreply.github.com>
+ *
+ * @author Jonas Rittershofer <jotoeri@users.noreply.github.com>
+ *
+ * @license AGPL-3.0-or-later
+ *
+ * This program is free software: you can redistribute it and/or modify
+ * it under the terms of the GNU Affero General Public License as
+ * published by the Free Software Foundation, either version 3 of the
+ * License, or (at your option) any later version.
+ *
+ * This program is distributed in the hope that it will be useful,
+ * but WITHOUT ANY WARRANTY; without even the implied warranty of
+ * MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE.  See the
+ * GNU Affero General Public License for more details.
+ *
+ * You should have received a copy of the GNU Affero General Public License
+ * along with this program. If not, see <http://www.gnu.org/licenses/>.
+ *
+ */
+?>
+
+<div id="forms-settings"></div>
diff --git a/tests/Unit/Controller/ConfigControllerTest.php b/tests/Unit/Controller/ConfigControllerTest.php
new file mode 100644
index 000000000..d8f384458
--- /dev/null
+++ b/tests/Unit/Controller/ConfigControllerTest.php
@@ -0,0 +1,130 @@
+<?php
+
+declare(strict_types=1);
+/**
+ * @copyright Copyright (c) 2021 Jonas Rittershofer <jotoeri@users.noreply.github.com>
+ *
+ * @author Jonas Rittershofer <jotoeri@users.noreply.github.com>
+ *
+ * @license AGPL-3.0-or-later
+ *
+ * This program is free software: you can redistribute it and/or modify
+ * it under the terms of the GNU Affero General Public License as
+ * published by the Free Software Foundation, either version 3 of the
+ * License, or (at your option) any later version.
+ *
+ * This program is distributed in the hope that it will be useful,
+ * but WITHOUT ANY WARRANTY; without even the implied warranty of
+ * MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE.  See the
+ * GNU Affero General Public License for more details.
+ *
+ * You should have received a copy of the GNU Affero General Public License
+ * along with this program. If not, see <http://www.gnu.org/licenses/>.
+ *
+ */
+namespace OCA\Forms\Tests\Unit\Controller;
+
+use OCA\Forms\Controller\ConfigController;
+
+use OCA\Forms\Service\ConfigService;
+use OCP\AppFramework\Http\DataResponse;
+use OCP\IConfig;
+use OCP\ILogger;
+use OCP\IRequest;
+
+use PHPUnit\Framework\MockObject\MockObject;
+use Test\TestCase;
+
+class ConfigControllerTest extends TestCase {
+
+	/** @var ConfigController */
+	private $configController;
+
+	/** @var ConfigService */
+	private $configService;
+
+	/** @var IConfig|MockObject */
+	private $config;
+
+	/** @var ILogger|MockObject */
+	private $logger;
+
+	/** @var IRequest|MockObject */
+	private $request;
+
+	public function setUp(): void {
+		parent::setUp();
+
+		$this->configService = $this->createMock(ConfigService::class);
+		$this->config = $this->createMock(IConfig::class);
+		$this->logger = $this->createMock(ILogger::class);
+		$this->request = $this->createMock(IRequest::class);
+
+		$this->configController = new ConfigController(
+			'forms',
+			$this->configService,
+			$this->config,
+			$this->logger,
+			$this->request
+		);
+	}
+
+	public function testGetAppConfig() {
+		$this->configService->expects($this->once())
+			->method('getAppConfig')
+			->willReturn([
+				'allow' => 'someConfig',
+				'permit' => 'all'
+			]);
+		
+		$this->assertEquals(new DataResponse([
+			'allow' => 'someConfig',
+			'permit' => 'all'
+		]), $this->configController->getAppConfig());
+	}
+
+	public function dataUpdateAppConfig() {
+		return [
+			'booleanConfig' => [
+				'configKey' => 'allowPermitAll',
+				'configValue' => true,
+				'strConfig' => "true"
+			],
+			'arrayConfig' => [
+				'configKey' => 'allowPermitAll',
+				'configValue' => [
+					"admin",
+					"group1"
+				],
+				'strConfig' => '["admin","group1"]'
+			]
+		];
+	}
+	/**
+	 * @dataProvider dataUpdateAppConfig
+	 *
+	 * @param string $configKey
+	 * @param mixed $configValue
+	 * @param string $strConfig The configValue as json-string
+	 */
+	public function testUpdateAppConfig(string $configKey, $configValue, string $strConfig) {
+		$this->logger->expects($this->once())
+			->method('debug');
+		
+		$this->config->expects($this->once())
+			->method('setAppValue')
+			->with('forms', $configKey, $strConfig);
+
+		$this->assertEquals(new DataResponse(), $this->configController->updateAppConfig($configKey, $configValue));
+	}
+
+	public function testUpdateAppConfig_unknownKey() {
+		$this->logger->expects($this->once())
+			->method('debug');
+		
+		$this->config->expects($this->never())
+			->method('setAppValue');
+
+		$this->assertEquals(new DataResponse('Unknown appConfig key: someUnknownKey', 400), $this->configController->updateAppConfig('someUnknownKey', 'storeThisValue!'));
+	}
+}
diff --git a/tests/Unit/Controller/ShareApiControllerTest.php b/tests/Unit/Controller/ShareApiControllerTest.php
index 65e8053e3..ca5cdf6ff 100644
--- a/tests/Unit/Controller/ShareApiControllerTest.php
+++ b/tests/Unit/Controller/ShareApiControllerTest.php
@@ -30,6 +30,7 @@
 use OCA\Forms\Db\FormMapper;
 use OCA\Forms\Db\Share;
 use OCA\Forms\Db\ShareMapper;
+use OCA\Forms\Service\ConfigService;
 use OCA\Forms\Service\FormsService;
 
 use OCP\AppFramework\Db\DoesNotExistException;
@@ -61,6 +62,9 @@ class ShareApiControllerTest extends TestCase {
 	/** @var ShareMapper|MockObject */
 	private $shareMapper;
 
+	/** @var ConfigService|MockObject */
+	private $configService;
+
 	/** @var FormsService|MockObject */
 	private $formsService;
 
@@ -82,6 +86,7 @@ class ShareApiControllerTest extends TestCase {
 	public function setUp(): void {
 		$this->formMapper = $this->createMock(FormMapper::class);
 		$this->shareMapper = $this->createMock(ShareMapper::class);
+		$this->configService = $this->createMock(ConfigService::class);
 		$this->formsService = $this->createMock(FormsService::class);
 		$this->groupManager = $this->createMock(IGroupManager::class);
 		$this->logger = $this->createMock(ILogger::class);
@@ -102,6 +107,7 @@ public function setUp(): void {
 			'forms',
 			$this->formMapper,
 			$this->shareMapper,
+			$this->configService,
 			$this->formsService,
 			$this->groupManager,
 			$this->logger,
@@ -238,6 +244,10 @@ public function testNewLinkShare(int $shareType, string $shareWith, array $expec
 			->with($share)
 			->willReturn($shareWithId);
 
+		$this->configService->expects($this->once())
+			->method('getAllowPublicLink')
+			->willReturn(true);
+
 		$this->formsService->expects($this->once())
 			->method('getShareDisplayName')
 			->with($shareWithId->read())
@@ -255,7 +265,7 @@ public function testNewLinkShare(int $shareType, string $shareWith, array $expec
 	/**
 	 * Test a random link hash, that is already existing.
 	 */
-	public function testExistingLinkHash() {
+	public function testNewLinkShare_ExistingHash() {
 		$form = new Form();
 		$form->setId('5');
 		$form->setOwnerId('currentUser');
@@ -265,6 +275,10 @@ public function testExistingLinkHash() {
 			->with('5')
 			->willReturn($form);
 
+		$this->configService->expects($this->once())
+			->method('getAllowPublicLink')
+			->willReturn(true);
+
 		$this->secureRandom->expects($this->any())
 			->method('generate')
 			->willReturn('abcdefgh');
@@ -281,6 +295,25 @@ public function testExistingLinkHash() {
 		$this->shareApiController->newShare(5, IShare::TYPE_LINK, '');
 	}
 
+	/**
+	 * Test a random link hash, that is already existing.
+	 */
+	public function testNewLinkShare_PublicLinkNotAllowed() {
+		$form = new Form();
+		$form->setId('5');
+		$form->setOwnerId('currentUser');
+
+		$this->configService->expects($this->once())
+			->method('getAllowPublicLink')
+			->willReturn(false);
+
+		$this->shareMapper->expects($this->never())
+			->method('insert');
+
+		$this->expectException(OCSException::class);
+		$this->shareApiController->newShare(5, IShare::TYPE_LINK, '');
+	}
+
 	/**
 	 * Test an unused (but existing) Share-Type
 	 */
diff --git a/tests/Unit/Service/ConfigServiceTest.php b/tests/Unit/Service/ConfigServiceTest.php
new file mode 100644
index 000000000..d5cc2fc05
--- /dev/null
+++ b/tests/Unit/Service/ConfigServiceTest.php
@@ -0,0 +1,228 @@
+<?php
+
+declare(strict_types=1);
+/**
+ * @copyright Copyright (c) 2021 Jonas Rittershofer <jotoeri@users.noreply.github.com>
+ *
+ * @author Jonas Rittershofer <jotoeri@users.noreply.github.com>
+ *
+ * @license AGPL-3.0-or-later
+ *
+ * This program is free software: you can redistribute it and/or modify
+ * it under the terms of the GNU Affero General Public License as
+ * published by the Free Software Foundation, either version 3 of the
+ * License, or (at your option) any later version.
+ *
+ * This program is distributed in the hope that it will be useful,
+ * but WITHOUT ANY WARRANTY; without even the implied warranty of
+ * MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE.  See the
+ * GNU Affero General Public License for more details.
+ *
+ * You should have received a copy of the GNU Affero General Public License
+ * along with this program. If not, see <http://www.gnu.org/licenses/>.
+ *
+ */
+namespace OCA\Forms\Tests\Unit\Service;
+
+use OCA\Forms\Service\ConfigService;
+
+use OCP\IConfig;
+use OCP\IGroup;
+use OCP\IGroupManager;
+use OCP\ILogger;
+use OCP\IUser;
+use OCP\IUserSession;
+
+use PHPUnit\Framework\MockObject\MockObject;
+use Test\TestCase;
+
+class ConfigServiceTest extends TestCase {
+
+	/** @var ConfigService */
+	private $configService;
+
+	/** @var IConfig|MockObject */
+	private $config;
+
+	/** @var IGroupManager|MockObject */
+	private $groupManager;
+
+	/** @var ILogger|MockObject */
+	private $logger;
+
+	/** @var IUser|MockObject */
+	private $currentUser;
+
+	public function setUp(): void {
+		parent::setUp();
+
+		$this->config = $this->createMock(IConfig::class);
+		$this->groupManager = $this->createMock(IGroupManager::class);
+		$this->logger = $this->createMock(ILogger::class);
+		$userSession = $this->createMock(IUserSession::class);
+
+		$this->currentUser = $this->createMock(IUser::class);
+		$this->currentUser->expects($this->any())
+			->method('getUID')
+			->willReturn('currentUser');
+		$userSession->expects($this->any())
+			->method('getUser')
+			->willReturn($this->currentUser);
+
+		$this->configService = new ConfigService(
+			'forms',
+			$this->config,
+			$this->groupManager,
+			$this->logger,
+			$userSession
+		);
+	}
+
+	public function dataGetAppConfig() {
+		return [
+			'oneFullConfig' => [
+				'strConfig' => [
+					'allowPermitAll' => 'false',
+					'allowPublicLink' => 'false',
+					'creationAllowedGroups' => '["group1", "group2", "nonExisting"]',
+					'restrictCreation' => 'true',
+				],
+				'groupDisplayNames' => [
+					'group1' => 'Group No. 1',
+					'group2' => 'Group No. 2'
+				],
+				'expected' => [
+					'allowPermitAll' => false,
+					'allowPublicLink' => false,
+					'creationAllowedGroups' => [
+						[
+							'groupId' => 'group1',
+							'displayName' => 'Group No. 1'
+						],
+						[
+							'groupId' => 'group2',
+							'displayName' => 'Group No. 2'
+						]
+					],
+					'restrictCreation' => true,
+
+					'canCreateForms' => false
+				]
+			]
+		];
+	}
+	/**
+	 * @dataProvider dataGetAppConfig
+	 *
+	 * @param array $strConfig JSON Config Strings as stored in AppConfig
+	 * @param array $groupDisplayNames DisplayNames for Testing
+	 * @param array $expected
+	 */
+	public function testGetAppConfig(array $strConfig, array $groupDisplayNames, array $expected) {
+		// Default Values are set within getAppValue, thus returning this one.
+		$this->config->expects($this->any())
+			->method('getAppValue')
+			->will($this->returnCallback(function ($appName, $configKey, $defaultVal) use ($strConfig) {
+				return $strConfig[$configKey];
+			}));
+
+
+		// Mock Group formatting
+		$this->groupManager->expects($this->any())
+			->method('get')
+			->will($this->returnCallback(function ($groupId) use ($groupDisplayNames) {
+				if (!array_key_exists($groupId, $groupDisplayNames)) {
+					return [];
+				}
+				$group = $this->createMock(IGroup::class);
+				$group->expects($this->once())
+					->method('getDisplayName')
+					->willReturn($groupDisplayNames[$groupId]);
+				return $group;
+			}));
+
+		// Return currentUser Groups
+		$this->groupManager->expects($this->once())
+			->method('getUserGroupIds')
+			->with($this->currentUser)
+			->willReturn([]);
+
+		$this->assertEquals($expected, $this->configService->getAppConfig());
+	}
+
+	public function dataGetAppConfig_Default() {
+		return [
+			'defaultValues' => [
+				'expected' => [
+					'allowPermitAll' => true,
+					'allowPublicLink' => true,
+					'creationAllowedGroups' => [],
+					'restrictCreation' => false,
+
+					'canCreateForms' => true
+				]
+			]
+		];
+	}
+	/**
+	 * @dataProvider dataGetAppConfig_Default
+	 *
+	 * @param array $expected
+	 */
+	public function testGetAppConfig_Default(array $expected) {
+		// Default Values are set within getAppValue, thus returning this one.
+		$this->config->expects($this->any())
+			->method('getAppValue')
+			->will($this->returnCallback(function ($appName, $configKey, $defaultVal) {
+				return $defaultVal;
+			}));
+
+		$this->assertEquals($expected, $this->configService->getAppConfig());
+	}
+
+	public function dataCanCreateForms() {
+		return [
+			'notRestriced' => [
+				'config' => [
+					'restrictCreation' => 'false',
+				],
+				'expected' => true
+			],
+			'restrictedGroupAllowed' => [
+				'config' => [
+					'restrictCreation' => 'true',
+					'creationAllowedGroups' => '["usersGroup","notUsersGroup"]'
+				],
+				'expected' => true
+			],
+			'restrictedNotInGroup' => [
+				'config' => [
+					'restrictCreation' => 'true',
+					'creationAllowedGroups' => '["notUsersGroup"]'
+				],
+				'expected' => false
+			]
+		];
+	}
+
+	/**
+	 * @dataProvider dataCanCreateForms
+	 *
+	 * @param array $config AppConfig with necessary values
+	 * @param bool $expected
+	 */
+	public function testCanCreateForms(array $config, bool $expected) {
+		$this->config->expects($this->any())
+			->method('getAppValue')
+			->will($this->returnCallback(function ($appName, $configKey, $defaultVal) use ($config) {
+				return $config[$configKey];
+			}));
+
+		$this->groupManager->expects($this->any())
+			->method('getUserGroupIds')
+			->with($this->currentUser)
+			->willReturn(["usersGroup"]);
+		
+		$this->assertEquals($expected, $this->configService->canCreateForms());
+	}
+}
diff --git a/tests/Unit/Service/FormsServiceTest.php b/tests/Unit/Service/FormsServiceTest.php
index 80585a83f..b8e1efbc7 100644
--- a/tests/Unit/Service/FormsServiceTest.php
+++ b/tests/Unit/Service/FormsServiceTest.php
@@ -36,6 +36,7 @@
 use OCA\Forms\Db\Share;
 use OCA\Forms\Db\ShareMapper;
 use OCA\Forms\Db\SubmissionMapper;
+use OCA\Forms\Service\ConfigService;
 
 use OCP\IGroup;
 use OCP\IGroupManager;
@@ -71,6 +72,9 @@ class FormsServiceTest extends TestCase {
 	/** @var SubmissionMapper|MockObject */
 	private $submissionMapper;
 
+	/** @var ConfigService|MockObject */
+	private $configService;
+
 	/** @var IGroupManager|MockObject */
 	private $groupManager;
 
@@ -88,6 +92,7 @@ public function setUp(): void {
 		$this->questionMapper = $this->createMock(QuestionMapper::class);
 		$this->shareMapper = $this->createMock(ShareMapper::class);
 		$this->submissionMapper = $this->createMock(SubmissionMapper::class);
+		$this->configService = $this->createMock(ConfigService::class);
 
 		$this->groupManager = $this->createMock(IGroupManager::class);
 		$this->logger = $this->createMock(ILogger::class);
@@ -109,6 +114,7 @@ public function setUp(): void {
 			$this->questionMapper,
 			$this->shareMapper,
 			$this->submissionMapper,
+			$this->configService,
 			$this->groupManager,
 			$this->logger,
 			$this->userManager,
@@ -435,6 +441,10 @@ public function testGetPermissions(string $ownerId, array $access, array $expect
 			->with(42)
 			->willReturn([]);
 
+		$this->configService->expects($this->any())
+			->method('getAllowPermitAll')
+			->willReturn(true);
+
 		$this->assertEquals($expected, $this->formsService->getPermissions(42));
 	}
 
@@ -536,6 +546,7 @@ public function testPublicCanSubmit() {
 			$this->questionMapper,
 			$this->shareMapper,
 			$this->submissionMapper,
+			$this->configService,
 			$this->groupManager,
 			$this->logger,
 			$this->userManager,
@@ -646,6 +657,10 @@ public function testHasUserAccess(array $accessArray, string $ownerId, bool $exp
 			->with(42)
 			->willReturn($form);
 
+		$this->configService->expects($this->any())
+			->method('getAllowPermitAll')
+			->willReturn(true);
+
 		$this->assertEquals($expected, $this->formsService->hasUserAccess(42));
 	}
 
@@ -673,6 +688,26 @@ public function testHasUserAccess_DirectShare() {
 		$this->assertEquals(true, $this->formsService->hasUserAccess(42));
 	}
 
+	public function testHasUserAccess_PermitAllNotAllowed() {
+		$form = new Form();
+		$form->setAccess([
+			'permitAllUsers' => true,
+			'showToAllUsers' => true,
+		]);
+		$form->setOwnerId('notCurrentUser');
+
+		$this->formMapper->expects($this->once())
+			->method('findById')
+			->with(42)
+			->willReturn($form);
+
+		$this->configService->expects($this->once())
+			->method('getAllowPermitAll')
+			->willReturn(false);
+
+		$this->assertEquals(false, $this->formsService->hasUserAccess(42));
+	}
+
 	public function testHasUserAccess_NotLoggedIn() {
 		$userSession = $this->createMock(IUserSession::class);
 		$userSession->expects($this->once())
@@ -686,6 +721,7 @@ public function testHasUserAccess_NotLoggedIn() {
 			$this->questionMapper,
 			$this->shareMapper,
 			$this->submissionMapper,
+			$this->configService,
 			$this->groupManager,
 			$this->logger,
 			$this->userManager,
@@ -778,9 +814,13 @@ public function testIsSharedFormShown(string $ownerId, int $expires, array $acce
 		$form->setAccess($access);
 
 		$this->formMapper->expects($this->any())
-		->method('findById')
-		->with(42)
-		->willReturn($form);
+			->method('findById')
+			->with(42)
+			->willReturn($form);
+
+		$this->configService->expects($this->any())
+			->method('getAllowPermitAll')
+			->willReturn(true);
 
 		$share = new Share();
 		$share->setShareType($shareType);
@@ -793,6 +833,33 @@ public function testIsSharedFormShown(string $ownerId, int $expires, array $acce
 		$this->assertEquals($expected, $this->formsService->isSharedFormShown(42));
 	}
 
+	public function testIsSharedFormShown_PermitAllNotAllowed() {
+		$form = new Form();
+		$form->setId(42);
+		$form->setOwnerId('notCurrentUser');
+		$form->setExpires(false);
+		$form->setAccess([
+			'permitAllUsers' => true,
+			'showToAllUsers' => true,
+		]);
+
+		$this->formMapper->expects($this->any())
+			->method('findById')
+			->with(42)
+			->willReturn($form);
+
+		$this->configService->expects($this->any())
+			->method('getAllowPermitAll')
+			->willReturn(false);
+
+		$this->shareMapper->expects($this->any())
+			->method('findByForm')
+			->with(42)
+			->willReturn([]);
+
+		$this->assertEquals(false, $this->formsService->isSharedFormShown(42));
+	}
+
 	public function dataIsSharedToUser() {
 		return [
 			'sharedToUser' => [
diff --git a/webpack.js b/webpack.js
index a007fbb8d..62af35048 100644
--- a/webpack.js
+++ b/webpack.js
@@ -2,5 +2,6 @@ const path = require('path')
 const webpackConfig = require('@nextcloud/webpack-vue-config')
 
 webpackConfig.entry.submit =  path.resolve(path.join('src', 'submit.js'))
+webpackConfig.entry.settings = path.resolve(path.join('src', 'settings.js'))
 
 module.exports = webpackConfig