Different users have common environment, I hope that one user can NOT browser and operate stacks & services created by others users, any idea?
that feature is currently not possible in Rancher. You must create distinct environments for the users that can operate same stacks.
You can give different Roles in each environment to restrict what users can do