# Feedback wanted: Hiding functionGlobalContext from Context Sidebar

**URL:** <https://discourse.nodered.org/t/feedback-wanted-hiding-functionglobalcontext-from-context-sidebar/8106>\
**Category:** Core Development\
**Created:** [18 February 2019 15:45 UTC](https://discourse.nodered.org/t/feedback-wanted-hiding-functionglobalcontext-from-context-sidebar/8106 "2019-02-18T15:45:49Z")\
**Posts on this page:** 16\
**Page:** 1

<div class="post-metadata">

**Author:** ![knolleary](https://sea2.discourse-cdn.com/flex026/user_avatar/discourse.nodered.org/knolleary/32/3_2.png) [@knolleary](https://discourse.nodered.org/u/knolleary)\
**Post date:** [18 February 2019 15:45 UTC](https://discourse.nodered.org/t/feedback-wanted-hiding-functionglobalcontext-from-context-sidebar/8106/1 "2019-02-18T15:45:49Z")

</div>

When we introduced Persistent Context in 0.19 we also added the new Context sidebar that lets you see the contents of context.

A concern has been raised that, in some circumstances, it is not desirable to expose the values of context to the editor. For example, where `functionGlobalContext` is used to provide API tokens to a flow.

This is probably of less interest to individual users of Node-RED who have full access to the system. But for those running hosted instances of Node-RED, where the user creating flows in the editor may not be the person who setup the instance and its environment, this could be an important issue to consider.

I'm looking at what options we can introduce to reduce the potential problem this brings and would like some feedback, as the approach would potential have consequences for all users.

Before describing the approach, some background to how some of this works.

1. `functionGlobalContext` is used to seed the `global` context object in the runtime
2. the `global` context object provides the `get`/`set` functions as well as a `keys` function
3. the `keys` function returns the names of all variables held in that context object as a list. There is no indication if the value came from `functionGlobalContext` or was a value set at runtime by the flow.
4. the context sidebar calls an admin HTTP api to get the values. That api uses the `keys` function to get a list of what it needs to return - it doesn't have access to any more information than that.

### A propsoal for feedback

Here is what we're proposing to change:

1. by default, `global.keys()` will no longer return the names of properties set in `functionGlobalContext`.
2. they can still be retrieved by `global.get`
3. with no further changes, that will hide the `functionGlobalContext` values from the context admin http api and therefore from the context sidebar in the editor
4. a new setting will be introduced alongside `functionGlobalContext` that restores the behaviour of `global.keys` returning `fGC`'s key names
5. the name of this setting is to be decided... `exportGlobalContext` maybe...?

The reason I would like some feedback on this approach is because it will change the behaviour of `global.keys` for everyone. That is potentially disruptive if you have a flow that relies on global.keys returning everything.

We could have taken the approach that the new setting would be used to _turn off_ the values appearing in global.keys. That would have less potential for disruption, but we'd rather be secure-by-default and for users to knowingly opt in to their functionGlobalContext values being visible in the editor.

There is a longer term approach around the finer-grained permissions model we have in the editor - where a user could be given flow edit permission, but not permission to read context. That would help address the more general problem of context beyond just that in `functionGlobalContext` - but isn't a quick change.

Please share your thoughts. As I said at the start, the issue this is trying to address is unlikely to be one many of you need to worry about. However the proposed way to solve it _might_ have an impact.

---

<div class="post-metadata">

**Author:** ![doccirrus](https://avatars.discourse-cdn.com/v4/letter/d/8797f3/32.png) [@doccirrus](https://discourse.nodered.org/u/doccirrus)\
**Post date:** [18 February 2019 17:27 UTC](https://discourse.nodered.org/t/feedback-wanted-hiding-functionglobalcontext-from-context-sidebar/8106/2 "2019-02-18T17:27:43Z")

</div>

Hi,

I would suggest to add a flag in settings.js to be able to hide/show the tabs in UI.

My issue:  
All the global variables in "functionGlobalContext" like port, host etc which are used by different flows are being exposed via 'CONTEXT' tab.

so I would like to hide the tab in UI without changing any other functionality ( Enabling/Disabling the tab ).

Thank you

---

<div class="post-metadata">

**Author:** ![zenofmud](https://sea2.discourse-cdn.com/flex026/user_avatar/discourse.nodered.org/zenofmud/32/316_2.png) [@zenofmud](https://discourse.nodered.org/u/zenofmud)\
**Post date:** [18 February 2019 18:32 UTC](https://discourse.nodered.org/t/feedback-wanted-hiding-functionglobalcontext-from-context-sidebar/8106/3 "2019-02-18T18:32:50Z")

</div>

I'd vote having the option in settings.js be used to impliment the changes to hide things.  
i.e. you have to edit settings.js to get the new feature.

---

<div class="post-metadata">

**Author:** ![knolleary](https://sea2.discourse-cdn.com/flex026/user_avatar/discourse.nodered.org/knolleary/32/3_2.png) [@knolleary](https://discourse.nodered.org/u/knolleary)\
**Post date:** [18 February 2019 18:54 UTC](https://discourse.nodered.org/t/feedback-wanted-hiding-functionglobalcontext-from-context-sidebar/8106/4 "2019-02-18T18:54:50Z")

</div>

> [@zenofmud](#):
>
> I'd vote having the option in settings.js be used to impliment the changes to hide things.

Just to clarify, you'd vote for having to set the flag in order to hide functionGobalContext from calls to global.key, rather than that becoming the default behaviour?

---

<div class="post-metadata">

**Author:** ![zenofmud](https://sea2.discourse-cdn.com/flex026/user_avatar/discourse.nodered.org/zenofmud/32/316_2.png) [@zenofmud](https://discourse.nodered.org/u/zenofmud)\
**Post date:** [18 February 2019 20:36 UTC](https://discourse.nodered.org/t/feedback-wanted-hiding-functionglobalcontext-from-context-sidebar/8106/5 "2019-02-18T20:36:34Z")

</div>

Correct, you would have to take action to turn this new function on.

---

<div class="post-metadata">

**Author:** ![nlecaude](https://sea2.discourse-cdn.com/flex026/user_avatar/discourse.nodered.org/nlecaude/32/25_2.png) [@nlecaude](https://discourse.nodered.org/u/nlecaude)\
**Post date:** [18 February 2019 21:41 UTC](https://discourse.nodered.org/t/feedback-wanted-hiding-functionglobalcontext-from-context-sidebar/8106/6 "2019-02-18T21:41:29Z")

</div>

I personally don't mind if the default is to hide them as long as there's a way to restore current behaviour via the settings.

---

<div class="post-metadata">

**Author:** ![dceejay](https://sea2.discourse-cdn.com/flex026/user_avatar/discourse.nodered.org/dceejay/32/38_2.png) [@dceejay](https://discourse.nodered.org/u/dceejay)\
**Post date:** [18 February 2019 22:56 UTC](https://discourse.nodered.org/t/feedback-wanted-hiding-functionglobalcontext-from-context-sidebar/8106/7 "2019-02-18T22:56:22Z")

</div>

I think it would/should be safer by default - so should not be visible until you edit settings to turn them back on (so a change of default from today).

---

<div class="post-metadata">

**Author:** ![Andrei](https://sea2.discourse-cdn.com/flex026/user_avatar/discourse.nodered.org/andrei/32/10446_2.png) [@Andrei](https://discourse.nodered.org/u/Andrei)\
**Post date:** [19 February 2019 00:04 UTC](https://discourse.nodered.org/t/feedback-wanted-hiding-functionglobalcontext-from-context-sidebar/8106/8 "2019-02-19T00:04:38Z")

</div>

Just to confirm if my understanding is correct. Implementing this change will not prevent us from using global.keys() inside the function node to manipulate the values that are generated at runtime. Is this correct?

---

<div class="post-metadata">

**Author:** ![knolleary](https://sea2.discourse-cdn.com/flex026/user_avatar/discourse.nodered.org/knolleary/32/3_2.png) [@knolleary](https://discourse.nodered.org/u/knolleary)\
**Post date:** [19 February 2019 00:15 UTC](https://discourse.nodered.org/t/feedback-wanted-hiding-functionglobalcontext-from-context-sidebar/8106/9 "2019-02-19T00:15:36Z")

</div>

> [@Andrei](#):
>
> Is this correct?

Correct. This is only about limiting whether global.keys includes the keys provided by functionGobalContext. Any values set by your flows at runtime would still be returned.

---

<div class="post-metadata">

**Author:** ![ukmoose](https://sea2.discourse-cdn.com/flex026/user_avatar/discourse.nodered.org/ukmoose/32/13_2.png) [@ukmoose](https://discourse.nodered.org/u/ukmoose)\
**Post date:** [19 February 2019 07:41 UTC](https://discourse.nodered.org/t/feedback-wanted-hiding-functionglobalcontext-from-context-sidebar/8106/10 "2019-02-19T07:41:35Z")

</div>

If by default they are hidden, can you overwrite them with a normal global.set?  
If so you could potentially overwrite something you need without knowing it was set.

---

<div class="post-metadata">

**Author:** ![knolleary](https://sea2.discourse-cdn.com/flex026/user_avatar/discourse.nodered.org/knolleary/32/3_2.png) [@knolleary](https://discourse.nodered.org/u/knolleary)\
**Post date:** [19 February 2019 09:08 UTC](https://discourse.nodered.org/t/feedback-wanted-hiding-functionglobalcontext-from-context-sidebar/8106/11 "2019-02-19T09:08:41Z")

</div>

You can still `global.get` and `global.set` the values.

If someone has used `global.keys` to check if a particular value exists (rather than `global.get('FOO') !== undefined` ) then yes, they would be affected by this. To me, it's a very unnatural way of checking a value exists.

And that is the judgement we're trying to make. Is that type of code pattern actually used? The documentation doesn't highlight the existence of the `keys` function, nor do we use it in any examples. I think the risk is low.

---

<div class="post-metadata">

**Author:** ![drmibell](https://sea2.discourse-cdn.com/flex026/user_avatar/discourse.nodered.org/drmibell/32/8424_2.png) [@drmibell](https://discourse.nodered.org/u/drmibell)\
**Post date:** [19 February 2019 17:12 UTC](https://discourse.nodered.org/t/feedback-wanted-hiding-functionglobalcontext-from-context-sidebar/8106/12 "2019-02-19T17:12:02Z")

</div>

@ukmoose's comment raises a good question. Do you want to hide the existence of properties set in `functionGlobalContext` or just their values? If the latter, why not just display the values as ●●●●●? Then the developer will know they have been set, but the user without access to settings.js will not be able to see them.

---

<div class="post-metadata">

**Author:** ![knolleary](https://sea2.discourse-cdn.com/flex026/user_avatar/discourse.nodered.org/knolleary/32/3_2.png) [@knolleary](https://discourse.nodered.org/u/knolleary)\
**Post date:** [19 February 2019 17:56 UTC](https://discourse.nodered.org/t/feedback-wanted-hiding-functionglobalcontext-from-context-sidebar/8106/13 "2019-02-19T17:56:59Z")

</div>

> [@drmibell](#):
>
> If the latter, why not just display the values as ●●●●●?

That is an option. I was hoping to avoid it because it complicates the implementation quite a lot. As I described in the original post, the HTTP Admin api uses the `keys/get/set` api that context provides. That api doesn't tell you where the value came from - whether it was from `fGC` or set at runtime. For the admin api to be able to censor values, it would need more access to the internals of context then it does today. Of course, the complexity of implementation isn't a primary factor in deciding the right approach - but it does have a bearing. This requirement has come up from one person, no-one else has chipped into this thread to support the need for it. That makes it hard to assess how much time and effort needs to be spent on it.

---

<div class="post-metadata">

**Author:** ![drmibell](https://sea2.discourse-cdn.com/flex026/user_avatar/discourse.nodered.org/drmibell/32/8424_2.png) [@drmibell](https://discourse.nodered.org/u/drmibell)\
**Post date:** [19 February 2019 18:18 UTC](https://discourse.nodered.org/t/feedback-wanted-hiding-functionglobalcontext-from-context-sidebar/8106/14 "2019-02-19T18:18:23Z")

</div>

> [@knolleary](#):
>
> hard to assess how much time and effort needs to be spent on it

By all means, do the cost/benefit check -- your time is valuable. Perhaps the user's requirement could be met with the `node-red-contrib-credentials` node. I've used it happily but not recently. IIRC, it requires a message to flow through the node to pick up credentials instead of defining a global.

---

<div class="post-metadata">

**Author:** ![HirokiUchikawa](https://sea2.discourse-cdn.com/flex026/user_avatar/discourse.nodered.org/hirokiuchikawa/32/46_2.png) [@HirokiUchikawa](https://discourse.nodered.org/u/HirokiUchikawa)\
**Post date:** [20 February 2019 03:22 UTC](https://discourse.nodered.org/t/feedback-wanted-hiding-functionglobalcontext-from-context-sidebar/8106/15 "2019-02-20T03:22:55Z")

</div>

If the default behavior is to hide `fGC`, it would be good to provide a means to easily change the behavior to current, I think.  
For example.

```auto
exportGlobalContext: 'all' // or true

```

---

<div class="post-metadata">

**Author:** ![knolleary](https://sea2.discourse-cdn.com/flex026/user_avatar/discourse.nodered.org/knolleary/32/3_2.png) [@knolleary](https://discourse.nodered.org/u/knolleary)\
**Post date:** [20 February 2019 07:35 UTC](https://discourse.nodered.org/t/feedback-wanted-hiding-functionglobalcontext-from-context-sidebar/8106/16 "2019-02-20T07:35:51Z")

</div>

Hi @HirokiUchikawa

Yes, the proposal above says `exportGobalContext` would be used to restore the existing behaviour.