# Editor & Admin API security not working

**URL:** <https://discourse.nodered.org/t/editor-admin-api-security-not-working/57080>\
**Category:** General\
**Created:** [23 January 2022 04:15 UTC](https://discourse.nodered.org/t/editor-admin-api-security-not-working/57080 "2022-01-23T04:15:18Z")\
**Posts on this page:** 4\
**Page:** 1

<div class="post-metadata">

**Author:** ![subwayfootlong](https://sea2.discourse-cdn.com/flex026/user_avatar/discourse.nodered.org/subwayfootlong/32/42037_2.png) [@subwayfootlong](https://discourse.nodered.org/u/subwayfootlong)\
**Post date:** [23 January 2022 04:15 UTC](https://discourse.nodered.org/t/editor-admin-api-security-not-working/57080/1 "2022-01-23T04:15:18Z")

</div>

Hi all,  
Im running node-red on a vm with oracle cloud and I am trying to get the username and password functionality.  
I followed this [guide](https://nodered.org/docs/user-guide/runtime/securing-node-red#editor--admin-api-security) and upon restart, its not prompting me to enter username and password, it just goes to the editor right away.  
This is the settings.js file  
 ![image](https://us1.discourse-cdn.com/flex026/uploads/nodered/original/3X/4/c/4cdf62e50130360fde501cf2a78b329529ad6dfa.png)  
Am I skipping a step?

---

<div class="post-metadata">

**Author:** ![subwayfootlong](https://sea2.discourse-cdn.com/flex026/user_avatar/discourse.nodered.org/subwayfootlong/32/42037_2.png) [@subwayfootlong](https://discourse.nodered.org/u/subwayfootlong)\
**Post date:** [23 January 2022 06:13 UTC](https://discourse.nodered.org/t/editor-admin-api-security-not-working/57080/2 "2022-01-23T06:13:25Z")

</div>

Ok I fixed it myself.

For some reason, I somehow edited the wrong file?  
Use `cd .node-red/` to find the settings.js file instead of going through the directories which may lead you to the wrong settings.js

---

<div class="post-metadata">

**Author:** ![TotallyInformation](https://sea2.discourse-cdn.com/flex026/user_avatar/discourse.nodered.org/totallyinformation/32/31_2.png) [@TotallyInformation](https://discourse.nodered.org/u/TotallyInformation)\
**Post date:** [23 January 2022 11:38 UTC](https://discourse.nodered.org/t/editor-admin-api-security-not-working/57080/3 "2022-01-23T11:38:26Z")

</div>

Not forgetting that the Node-RED log shows you where the correct settings file resides:

```auto
22 Jan 20:42:10 - [info] Settings file : C:\src\nr\data\settings.js

```

---

<div class="post-metadata">

**Author:** ![system](https://us1.discourse-cdn.com/flex026/uploads/nodered/original/1X/d073cd938eafa2e558d7c2cd59003b3ef4963033.png) [@system](https://discourse.nodered.org/u/system)\
**Post date:** [6 February 2022 11:38 UTC](https://discourse.nodered.org/t/editor-admin-api-security-not-working/57080/4 "2022-02-06T11:38:46Z")

</div>

This topic was automatically closed 14 days after the last reply. New replies are no longer allowed.