# Can I completely remove a node from the editor?

**URL:** https://discourse.nodered.org/t/can-i-completely-remove-a-node-from-the-editor/25064
**Category:** Core Development
**Created:** [18 April 2020 11:14 UTC](https://discourse.nodered.org/t/can-i-completely-remove-a-node-from-the-editor/25064 "2020-04-18T11:14:45Z")
**Posts on this page:** 18
**Page:** 1

<div class="post-metadata">

### Author: ![edoardottt](https://sea2.discourse-cdn.com/flex026/user_avatar/discourse.nodered.org/edoardottt/32/20179_2.png) [@edoardottt](https://discourse.nodered.org/u/edoardottt)
#### Post date: [18 April 2020 11:14 UTC](https://discourse.nodered.org/t/can-i-completely-remove-a-node-from-the-editor/25064/1 "2020-04-18T11:14:45Z")

</div>

For security reasons, I don't want to give access to the user to use the node exec.  
Can I set node-red files to not show the exec node? Thanks.  
I can also accept technical answers...like edit/delete lines of code/files etc. etc.  
Thanks.

---

<div class="post-metadata">

### Author: ![TotallyInformation](https://sea2.discourse-cdn.com/flex026/user_avatar/discourse.nodered.org/totallyinformation/32/31_2.png) [@TotallyInformation](https://discourse.nodered.org/u/TotallyInformation)
#### Post date: [18 April 2020 11:20 UTC](https://discourse.nodered.org/t/can-i-completely-remove-a-node-from-the-editor/25064/2 "2020-04-18T11:20:43Z")

</div>

You can disable an individual node from the Palette Manager - but that is only useful if your users don't have access to the editor.

It would be possible to delete an individual node but you would have to repeat the process every time Node-RED was updated. To delete a node manually, find its 2 files (.html and .js) and delete them, also remove the appropriate entry from the parent package.json file.

Depending on the server platform, it might be more effective to give each user their own instance of Node-RED running under their own user ID. Then you could control exactly what they can do at the OS level.

---

<div class="post-metadata">

### Author: ![BartButenaers](https://sea2.discourse-cdn.com/flex026/user_avatar/discourse.nodered.org/bartbutenaers/32/10476_2.png) [@BartButenaers](https://discourse.nodered.org/u/BartButenaers)
#### Post date: [18 April 2020 11:29 UTC](https://discourse.nodered.org/t/can-i-completely-remove-a-node-from-the-editor/25064/3 "2020-04-18T11:29:22Z")

</div>

> [@TotallyInformation](#):
>
> give each user their own instance of Node-RED running under their own user ID

Or docker containers...

---

<div class="post-metadata">

### Author: ![TotallyInformation](https://sea2.discourse-cdn.com/flex026/user_avatar/discourse.nodered.org/totallyinformation/32/31_2.png) [@TotallyInformation](https://discourse.nodered.org/u/TotallyInformation)
#### Post date: [18 April 2020 11:30 UTC](https://discourse.nodered.org/t/can-i-completely-remove-a-node-from-the-editor/25064/4 "2020-04-18T11:30:13Z")

</div>

Good point.

---

<div class="post-metadata">

### Author: ![edoardottt](https://sea2.discourse-cdn.com/flex026/user_avatar/discourse.nodered.org/edoardottt/32/20179_2.png) [@edoardottt](https://discourse.nodered.org/u/edoardottt)
#### Post date: [18 April 2020 11:30 UTC](https://discourse.nodered.org/t/can-i-completely-remove-a-node-from-the-editor/25064/5 "2020-04-18T11:30:47Z")

</div>

Here? /home/example/.npm/@node-red/nodes/1.0.5/package/core/function  
Here I deleted exec.js and exec.html. But still there is exec node on editor...  
Where is the package.json I have to edit?  
Yes, sure, I'll use a Docker image, so I'll be able to do it as I want.  
Thanks for your replying!

---

<div class="post-metadata">

### Author: ![TotallyInformation](https://sea2.discourse-cdn.com/flex026/user_avatar/discourse.nodered.org/totallyinformation/32/31_2.png) [@TotallyInformation](https://discourse.nodered.org/u/TotallyInformation)
#### Post date: [18 April 2020 11:32 UTC](https://discourse.nodered.org/t/can-i-completely-remove-a-node-from-the-editor/25064/6 "2020-04-18T11:32:29Z")

</div>

As exec is in the code nodes set, just look up the folder structure to find the appropriate package.json

---

<div class="post-metadata">

### Author: ![BartButenaers](https://sea2.discourse-cdn.com/flex026/user_avatar/discourse.nodered.org/bartbutenaers/32/10476_2.png) [@BartButenaers](https://discourse.nodered.org/u/BartButenaers)
#### Post date: [18 April 2020 11:35 UTC](https://discourse.nodered.org/t/can-i-completely-remove-a-node-from-the-editor/25064/7 "2020-04-18T11:35:43Z")

</div>

But if you could manage to remove the exec node, your users could (via manage palette) e.g. install my node-red-contrib-xterm node... And then the gates are open... But I assume that would all be no problem when they have only access to their Docker container?

---

<div class="post-metadata">

### Author: ![edoardottt](https://sea2.discourse-cdn.com/flex026/user_avatar/discourse.nodered.org/edoardottt/32/20179_2.png) [@edoardottt](https://discourse.nodered.org/u/edoardottt)
#### Post date: [18 April 2020 11:44 UTC](https://discourse.nodered.org/t/can-i-completely-remove-a-node-from-the-editor/25064/8 "2020-04-18T11:44:49Z")

</div>

Yes, absolutely, the security is the first thing on the list.  
All yours advices are welcome 🙂

---

<div class="post-metadata">

### Author: ![BartButenaers](https://sea2.discourse-cdn.com/flex026/user_avatar/discourse.nodered.org/bartbutenaers/32/10476_2.png) [@BartButenaers](https://discourse.nodered.org/u/BartButenaers)
#### Post date: [18 April 2020 11:52 UTC](https://discourse.nodered.org/t/can-i-completely-remove-a-node-from-the-editor/25064/9 "2020-04-18T11:52:29Z")

</div>

Unfortunately that is as far as my knowledge goes, so can't help you further... Think Julian is right that you need to setup your permissions somehow outside of Node-RED. A finer grained editor permission model is on the Node-RED [backlog](https://trello.com/c/V6b7CISI), but that won't be available soon...

---

<div class="post-metadata">

### Author: ![knolleary](https://sea2.discourse-cdn.com/flex026/user_avatar/discourse.nodered.org/knolleary/32/3_2.png) [@knolleary](https://discourse.nodered.org/u/knolleary)
#### Post date: [18 April 2020 11:54 UTC](https://discourse.nodered.org/t/can-i-completely-remove-a-node-from-the-editor/25064/10 "2020-04-18T11:54:37Z")

</div>

You can tell the runtime to not load a node using the nodeExcludes option in the settings file.

Set it to an array of the node files you want it to ignore.

For example: [https://github.com/IBM/node-red-app/blob/0c91c709a4dfa09fa5baa9fb8ff882adfc34fa19/bluemix-settings.js#L54](https://github.com/IBM/node-red-app/blob/0c91c709a4dfa09fa5baa9fb8ff882adfc34fa19/bluemix-settings.js#L54)

---

<div class="post-metadata">

### Author: ![edoardottt](https://sea2.discourse-cdn.com/flex026/user_avatar/discourse.nodered.org/edoardottt/32/20179_2.png) [@edoardottt](https://discourse.nodered.org/u/edoardottt)
#### Post date: [18 April 2020 12:39 UTC](https://discourse.nodered.org/t/can-i-completely-remove-a-node-from-the-editor/25064/11 "2020-04-18T12:39:55Z")

</div>

Thanks!! 😀

---

<div class="post-metadata">

### Author: ![knolleary](https://sea2.discourse-cdn.com/flex026/user_avatar/discourse.nodered.org/knolleary/32/3_2.png) [@knolleary](https://discourse.nodered.org/u/knolleary)
#### Post date: [18 April 2020 12:43 UTC](https://discourse.nodered.org/t/can-i-completely-remove-a-node-from-the-editor/25064/12 "2020-04-18T12:43:40Z")

</div>

And if you want to disable the palette manager so the user can't install extra nodes, you can do that under the editorTheme setting...

```auto
editorTheme: {
   palette: {
        editable: false
   }
}

```

---

<div class="post-metadata">

### Author: ![Colin](https://sea2.discourse-cdn.com/flex026/user_avatar/discourse.nodered.org/colin/32/17040_2.png) [@Colin](https://discourse.nodered.org/u/Colin)
#### Post date: [18 April 2020 12:47 UTC](https://discourse.nodered.org/t/can-i-completely-remove-a-node-from-the-editor/25064/13 "2020-04-18T12:47:49Z")

</div>

What are you wanting to achieve by doing this? Depending on the answer to that they may be better alternatives.

---

<div class="post-metadata">

### Author: ![knolleary](https://sea2.discourse-cdn.com/flex026/user_avatar/discourse.nodered.org/knolleary/32/3_2.png) [@knolleary](https://discourse.nodered.org/u/knolleary)
#### Post date: [18 April 2020 12:53 UTC](https://discourse.nodered.org/t/can-i-completely-remove-a-node-from-the-editor/25064/14 "2020-04-18T12:53:37Z")

</div>

What alternatives are you thinking of to prevent a node appearing in the palette? nodesExcludes is the ideal way to do that if you have control of the settings file.

---

<div class="post-metadata">

### Author: ![TotallyInformation](https://sea2.discourse-cdn.com/flex026/user_avatar/discourse.nodered.org/totallyinformation/32/31_2.png) [@TotallyInformation](https://discourse.nodered.org/u/TotallyInformation)
#### Post date: [18 April 2020 13:00 UTC](https://discourse.nodered.org/t/can-i-completely-remove-a-node-from-the-editor/25064/15 "2020-04-18T13:00:07Z")

</div>

> [@knolleary](#):
>
> nodeExcludes

Argh! I was trying to find that. Missing from the docs?

---

<div class="post-metadata">

### Author: ![Colin](https://sea2.discourse-cdn.com/flex026/user_avatar/discourse.nodered.org/colin/32/17040_2.png) [@Colin](https://discourse.nodered.org/u/Colin)
#### Post date: [18 April 2020 14:00 UTC](https://discourse.nodered.org/t/can-i-completely-remove-a-node-from-the-editor/25064/16 "2020-04-18T14:00:42Z")

</div>

> [@knolleary](#):
>
> What alternatives are you thinking of to prevent a node appearing in the palette

I was wondering what the purpose was. If the purpose is to prevent the user messing with the system a better way may be to lock down the node-red user so it can't do anything undesirable. Then even if the user started writing functions that could mess with the systems he would not be able to.

---

<div class="post-metadata">

### Author: ![TotallyInformation](https://sea2.discourse-cdn.com/flex026/user_avatar/discourse.nodered.org/totallyinformation/32/31_2.png) [@TotallyInformation](https://discourse.nodered.org/u/TotallyInformation)
#### Post date: [18 April 2020 16:16 UTC](https://discourse.nodered.org/t/can-i-completely-remove-a-node-from-the-editor/25064/17 "2020-04-18T16:16:26Z")

</div>

Exactly what I was saying in the first post.

---

<div class="post-metadata">

### Author: ![system](https://us1.discourse-cdn.com/flex026/uploads/nodered/original/1X/d073cd938eafa2e558d7c2cd59003b3ef4963033.png) [@system](https://discourse.nodered.org/u/system)
#### Post date: [17 June 2020 16:16 UTC](https://discourse.nodered.org/t/can-i-completely-remove-a-node-from-the-editor/25064/18 "2020-06-17T16:16:28Z")

</div>

This topic was automatically closed 60 days after the last reply. New replies are no longer allowed.
