# Flow Security, If, then How can it be done?

**URL:** <https://discourse.nodered.org/t/flow-security-if-then-how-can-it-be-done/16507>\
**Category:** Feature Requests\
**Tags:** security\
**Created:** [9 October 2019 13:23 UTC](https://discourse.nodered.org/t/flow-security-if-then-how-can-it-be-done/16507 "2019-10-09T13:23:03Z")\
**Posts on this page:** 1\
**Showing post:** 24

<div class="post-metadata">

**Author:** ![rayz](https://avatars.discourse-cdn.com/v4/letter/r/f05b48/32.png) [@rayz](https://discourse.nodered.org/u/rayz)\
**Post date:** [29 April 2020 00:16 UTC](https://discourse.nodered.org/t/flow-security-if-then-how-can-it-be-done/16507/24 "2020-04-29T00:16:26Z")

</div>

Hi Node-Red Team,

I would like to contribute here on the design concept, ultimately it would be beneficial to have the permissions to be able to control the access down to the node level as well as flow level (tab), so that each individual node could be configured for read or write or no view access (to secure the function code). To the point where, if I wanted the user to only see one node in the editor to be able to change the configuration they could, all other nodes would be hidden.

It would be sort of what I would like to control as per this request, to allow the end user to edit the configuration node only, i.e. FTP server user/password when the password of a FTP server changes for periodically for best practice cyber-security.

> [@User Change Configuration Node (FTP) and redeploy via dashboard](https://discourse.nodered.org/t/user-change-configuration-node-ftp-and-redeploy-via-dashboard/25710):
>
> I'm hoping there is way to create a ui for the end user to change the credentials of the ftp server configuration node and then re-deploy the flow with that changed user/password?

---

_[View the full topic](https://discourse.nodered.org/t/flow-security-if-then-how-can-it-be-done/16507)._