adminusr:x:1010:1010::/home/adminusr:/bin/adminsh

#!/bin/bash

trap "echo ''" SIGINT

while true ;do
read cmd
restricted $cmd

done


function restricted () {

cmd=$1
i=0; args='';
for i in `seq 2 $#` ; do
    shift 1
    if [ `echo $1 | grep -e "&&" -e ";" -e ">" -e ">>" --count` -gt 0 ];then break; fi
    args=$args' '$1
done

if [ "$cmd.x" != ".x" ];then log "$cmd $args" ;fi

case $cmd in
    # commands
    'usercommand')
        sudo /bin/actual_command ;;
...

'edit-network')
    sudo /bin/nano -w -R /etc/network/interfaces;;