# Access Control list **URL:** \ **Category:** General\ **Created:** [22 December 2022 07:26 UTC](https://discourse.nodered.org/t/access-control-list/72567 "2022-12-22T07:26:27Z")\ **Posts on this page:** 4\ **Page:** 1

**Author:** ![rimjhimbhuyan](https://avatars.discourse-cdn.com/v4/letter/r/a88e57/32.png) [@rimjhimbhuyan](https://discourse.nodered.org/u/rimjhimbhuyan)\ **Post date:** [22 December 2022 07:26 UTC](https://discourse.nodered.org/t/access-control-list/72567/1 "2022-12-22T07:26:27Z")

I have created one to-do list with the access control , where user and admin can add task in the list , but only admin can delete the task not the user , but i don't know where the problem is , in my code the user is can able to delete , but i don't want that . i just want to give that delete permission to the admin not the user . i want when the user will click the delete button it will show pop up alert . ```auto [ { "id": "54f307e930537306", "type": "sqlite", "z": "e4cce7cb21b245cb", "mydb": "efc25760311815df", "sqlquery": "msg.topic", "sql": "DELETE FROM list WHERE rowid = {{req.params.rowid}}", "name": "db1", "x": 510, "y": 200, "wires": [ [] ] }, { "id": "be2c3811ec261bc1", "type": "inject", "z": "e4cce7cb21b245cb", "name": "create list", "props": [ { "p": "payload" }, { "p": "topic", "vt": "str" } ], "repeat": "", "crontab": "", "once": false, "onceDelay": 0.1, "topic": "CREATE TABLE list(list)", "payload": "", "payloadType": "date", "x": 270, "y": 140, "wires": [ [ "54f307e930537306" ] ] }, { "id": "61d43c6c6eb8e185", "type": "inject", "z": "e4cce7cb21b245cb", "name": "delete list", "props": [ { "p": "payload" }, { "p": "topic", "vt": "str" } ], "repeat": "", "crontab": "", "once": false, "onceDelay": 0.1, "topic": "DELETE FROM list;", "payload": "", "payloadType": "date", "x": 250, "y": 240, "wires": [ [ "54f307e930537306" ] ] }, { "id": "7476e933267ac97d", "type": "comment", "z": "e4cce7cb21b245cb", "name": "create tables", "info": "", "x": 250, "y": 100, "wires": [] }, { "id": "b5acdc7f6b58e3cd", "type": "comment", "z": "e4cce7cb21b245cb", "name": "delete tables", "info": "", "x": 250, "y": 200, "wires": [] }, { "id": "efc25760311815df", "type": "sqlitedb", "db": "E:\\acl\\table.db", "mode": "RWC" } ] [ { "id": "39931c664b6f7c7c", "type": "http in", "z": "1398c183662f7310", "name": "", "url": "/todolist", "method": "get", "upload": false, "swaggerDoc": "", "x": 90, "y": 140, "wires": [ [ "4b219bb347e11f32" ] ] }, { "id": "4f890b1aaa8f2da3", "type": "template", "z": "1398c183662f7310", "name": "website", "field": "payload", "fieldType": "msg", "format": "handlebars", "syntax": "mustache", "template": "\n\n \n \n Todo-List\n\n\n\n\n

My TO-DO List

\n \n \n \n \n \n \n \n \n \n \n \n {{#payload}} \n \n \n \n \n \n {{/payload}} \n \n \n \n

List
{{list}}	Delete

\n \n \n

\n \n\n\n\n", "output": "str", "x": 620, "y": 120, "wires": [ [ "583037ebaf9ac6ea" ] ] }, { "id": "045a0235e9353a04", "type": "http in", "z": "1398c183662f7310", "name": "", "url": "/todolist", "method": "post", "upload": false, "swaggerDoc": "", "x": 90, "y": 200, "wires": [ [ "903c4f053052a161" ] ] }, { "id": "903c4f053052a161", "type": "template", "z": "1398c183662f7310", "name": "insert", "field": "topic", "fieldType": "msg", "format": "handlebars", "syntax": "mustache", "template": "INSERT INTO list VALUES ('{{payload.list}}')\n", "output": "str", "x": 270, "y": 200, "wires": [ [ "527fdbc0efa2ca01" ] ] }, { "id": "4b219bb347e11f32", "type": "sqlite", "z": "1398c183662f7310", "mydb": "efc25760311815df", "sqlquery": "fixed", "sql": "SELECT rowid, * FROM list\n \n", "name": "db", "x": 470, "y": 120, "wires": [ [ "4f890b1aaa8f2da3" ] ] }, { "id": "527fdbc0efa2ca01", "type": "sqlite", "z": "1398c183662f7310", "mydb": "efc25760311815df", "sqlquery": "msg.topic", "sql": "INSERT INTO LIST VALUES (?)\n \n", "name": "dbsq", "x": 510, "y": 200, "wires": [ [ "4b219bb347e11f32" ] ] }, { "id": "321835e031a8a6f8", "type": "http in", "z": "1398c183662f7310", "name": "", "url": "/todolist/delete/:rowid", "method": "get", "upload": false, "swaggerDoc": "", "x": 110, "y": 260, "wires": [ [ "7683f130b0c7f976" ] ] }, { "id": "7683f130b0c7f976", "type": "template", "z": "1398c183662f7310", "name": "delete", "field": "topic", "fieldType": "msg", "format": "sql", "syntax": "mustache", "template": "DELETE FROM list WHERE rowid ={{req.params.rowid}}\n\n\n", "output": "str", "x": 370, "y": 260, "wires": [ [ "527fdbc0efa2ca01" ] ] }, { "id": "583037ebaf9ac6ea", "type": "http response", "z": "1398c183662f7310", "name": "", "statusCode": "", "headers": {}, "x": 790, "y": 120, "wires": [] }, { "id": "efc25760311815df", "type": "sqlitedb", "db": "E:\\acl\\table.db", "mode": "RWC" } ] [ { "id": "0f72583a6e3b7796", "type": "http response", "z": "88801074abacc452", "name": "", "statusCode": "", "headers": {}, "x": 790, "y": 200, "wires": [] }, { "id": "904c322a27e79625", "type": "http response", "z": "88801074abacc452", "name": "", "statusCode": "", "headers": {}, "x": 770, "y": 140, "wires": [] }, { "id": "5746b2c8a2d3fd1a", "type": "http in", "z": "88801074abacc452", "name": "", "url": "/acl", "method": "get", "upload": false, "swaggerDoc": "", "x": 80, "y": 120, "wires": [ [ "3e12d89df745c665" ] ] }, { "id": "5260e67ad96e62cf", "type": "template", "z": "88801074abacc452", "name": "for admins only", "field": "payload", "fieldType": "msg", "format": "handlebars", "syntax": "mustache", "template": "\n\n \n \n Todo-List\n \n\n\n

My TO-DO List

\n \n \n \n \n \n \n \n \n \n \n \n {{#payload}} \n \n \n \n \n {{/payload}}\n \n \n

List
{{list}}	Delete

\n \n \n

\n\n \n\n\n\n", "x": 600, "y": 140, "wires": [ [ "904c322a27e79625" ] ] }, { "id": "8549f30d31d44505", "type": "template", "z": "88801074abacc452", "name": "for allowed users only", "field": "payload", "fieldType": "msg", "format": "handlebars", "syntax": "mustache", "template": "\n\n \n \n Todo-List\n\n\n\n

My TO-DO List

\n \n \n \n \n \n \n \n \n \n \n \n {{#payload}} \n \n \n \n \n \n \n \n \n {{/payload}}\n \n \n \n

List
{{list}}

\n \n \n

\n\n \n\n\n\n", "x": 600, "y": 200, "wires": [ [ "0f72583a6e3b7796" ] ] }, { "id": "825acb9cda2aceff", "type": "switch", "z": "88801074abacc452", "name": "check user scope", "property": "payload.user.scope", "propertyType": "msg", "rules": [ { "t": "eq", "v": "admin", "vt": "str" }, { "t": "eq", "v": "user", "vt": "str" } ], "checkall": "false", "repair": false, "outputs": 2, "x": 370, "y": 160, "wires": [ [ "5260e67ad96e62cf" ], [ "8549f30d31d44505" ] ] }, { "id": "a74709e6c02ff041", "type": "template", "z": "88801074abacc452", "name": "custom login page", "field": "payload", "fieldType": "msg", "format": "handlebars", "syntax": "mustache", "template": "\n\n \n \n \n \n \n Access Control List\n\n\n\n \n \n \n \n\n\n", "x": 330, "y": 240, "wires": [ [ "2d6b83ebd7516c52" ] ] }, { "id": "3e12d89df745c665", "type": "users_isloggedin", "z": "88801074abacc452", "name": "log in", "enableCustomHandler": true, "outputs": 2, "x": 170, "y": 180, "wires": [ [ "825acb9cda2aceff" ], [ "a74709e6c02ff041" ] ] }, { "id": "2d6b83ebd7516c52", "type": "http response", "z": "88801074abacc452", "name": "", "statusCode": "", "headers": {}, "x": 510, "y": 260, "wires": [] } ] ``` ---

**Author:** ![TotallyInformation](https://sea2.discourse-cdn.com/flex026/user_avatar/discourse.nodered.org/totallyinformation/32/31_2.png) [@TotallyInformation](https://discourse.nodered.org/u/TotallyInformation)\ **Post date:** [22 December 2022 11:16 UTC](https://discourse.nodered.org/t/access-control-list/72567/2 "2022-12-22T11:16:55Z")

Please fix up your post - it is currently unreadable. ---

**Author:** ![Paul-Reed](https://sea2.discourse-cdn.com/flex026/user_avatar/discourse.nodered.org/paul-reed/32/66906_2.png) [@Paul-Reed](https://discourse.nodered.org/u/Paul-Reed)\ **Post date:** [22 December 2022 11:54 UTC](https://discourse.nodered.org/t/access-control-list/72567/3 "2022-12-22T11:54:17Z")

In order to make code readable and usable it is necessary to surround your code with three backticks (also known as a left quote or backquote `````) ````auto ``` code goes here ``` ```` You can edit and correct your post by clicking the pencil ✏ icon. See this post for more details - [How to share code or flow json](https://discourse.nodered.org/t/how-to-share-code-or-flow-json/506) ---

**Author:** ![system](https://us1.discourse-cdn.com/flex026/uploads/nodered/original/1X/d073cd938eafa2e558d7c2cd59003b3ef4963033.png) [@system](https://discourse.nodered.org/u/system)\ **Post date:** [20 February 2023 11:54 UTC](https://discourse.nodered.org/t/access-control-list/72567/4 "2023-02-20T11:54:54Z")

This topic was automatically closed 60 days after the last reply. New replies are no longer allowed.

My TO-DO List

My TO-DO List

My TO-DO List

Login