I'm trying to create a kids account.
I'd like to create a User Account that restricts all apps by default, except a specific list of apps, i.e. firefox, Yo Frankie, Numpty Physics, etc.. Additionally, I'd like to make their entire account non-writable, with the exception that they may write if the app allows them to create a document. Of course if the app they are allowed to run needs to write logs for example, this will need to be enabled too. The intended result is they wouldn't be able to right click on the desktop and create a directory or document. They might be able to download an executable, but not execute it.
How can I do this?