Node-RED Development Team: Within Node-RED, I would like to create a base system with a few flows that are not accessible for Technicians, but available for Engineering. These flows logic are to host the UI and functions, configuration flows, and those that otherwise should not be changed. Can it…

I expect you've thought about this but what about having more than 1 instance of Node-RED? Perhaps one for each level? Then you can easily enforce separation between the layers - even at a networking level if required. You would of course need to think about communications between them but that is …

Yes, Multiple Node-RED instances. Thank you for that suggestion. We are now in the process of using the current C++ environment which can be installed on Windows 10 and integrating it with Node-RED in the background and using TCP/IP to update the user interface. This perhaps is a variant where yo…

[image] tree-frog: However, I do believe that the system would benefit from having layered security if you could user define the tabs to be hidden and accessed with a hashed user access defined in the system configuration. I'm certainly not disagreeing with your desire or that perhaps NR migh…

@TotallyInformation , Your insight is, as always, beneficial. To clarify, I cannot tell if this feature is difficult or not. I have the utmost respect the development team and their time. I am simply a "user" and my needs are unapologetically selfish. I will take your advice in the meantime and…

Thank you for your kind words, always welcome. Dashboard, of course, fills a much needed position in Node-RED of being accessible with minimal to no web building experience. But like many complex frameworks, you get to a point where you "fall off a cliff" and the complexity of fighting with the fra…

Hi Node-Red Team, I would like to contribute here on the design concept, ultimately it would be beneficial to have the permissions to be able to control the access down to the node level as well as flow level (tab), so that each individual node could be configured for read or write or no view acces…

[image] rayz: FTP server user/password when the password of a FTP server changes for periodically for best practice cyber-security. I'm not really in a position to comment on your proposal but I can comment on this. Best practice for identity authentication and authorisation management is to…

Hi TotallyInformation, Yes that's all very well, however the ftp node has the server configuration node in it, and to use that node the configuration node needs to be configured with the server credentials?

I'm not familiar with that particular node - but many nodes can also use environment variables to help configuration https://nodered.org/docs/user-guide/environment-variables

Node-RED

Node-RED Forum

Flow Security, If, then How can it be done?

Core Development Feature Requests

dceejay 15 February 2020 16:33 23

see - How to fix maximum screen size for a Node-RED Dashboard?
may help

Topic		Replies	Views
Hide all flows other than the ID in the current URL Feature Requests	11	365	25 December 2023
Hidden flows, nodes, locked subflows General	3	3125	6 May 2019
Basic concept - what is a Flow General	19	1399	22 June 2019
Node-RED Survey: Shaping the Future of Node-RED's User Experience News	105	3243	6 October 2025
[Article] Node-RED Development: The Numbers General	10	576	3 November 2023

Copyright OpenJS Foundation and Node-RED contributors. All rights reserved. The OpenJS Foundation has registered trademarks and uses trademarks. For a list of trademarks of the OpenJS Foundation, please see our Trademark Policy and Trademark List. Trademarks and logos not indicated on the list of OpenJS Foundation trademarks are trademarks™ or registered® trademarks of their respective holders. Use of them does not imply any affiliation with or endorsement by them.

Flow Security, If, then How can it be done?

Related topics