# Hide Tab problem

**URL:** <https://discourse.nodered.org/t/hide-tab-problem/25603>\
**Category:** Dashboard\
**Created:** [27 April 2020 08:55 UTC](https://discourse.nodered.org/t/hide-tab-problem/25603 "2020-04-27T08:55:12Z")\
**Posts on this page:** 6\
**Page:** 1

<div class="post-metadata">

**Author:** ![iungo](https://sea2.discourse-cdn.com/flex026/user_avatar/discourse.nodered.org/iungo/32/8099_2.png) [@iungo](https://discourse.nodered.org/u/iungo)\
**Post date:** [27 April 2020 08:55 UTC](https://discourse.nodered.org/t/hide-tab-problem/25603/1 "2020-04-27T08:55:12Z")

</div>

After hiding tab by sending command to ui-control node, I don't see this tab in side menu this is fine.  
Also I don't have an access to this tab via sending a command to ui-control node (like {"tab":"tab"}), this is also fine.

But I still have access to this tab thru direct link (like [http://localhost:1880/ui/#!/1](http://localhost:1880/ui/#!/1)) and this is not so good.

I can hide all groups in tab, it works, but not so convenient for the large projects with several access levels.

Maybe anybody knows how to fix it?

---

<div class="post-metadata">

**Author:** ![dceejay](https://sea2.discourse-cdn.com/flex026/user_avatar/discourse.nodered.org/dceejay/32/38_2.png) [@dceejay](https://discourse.nodered.org/u/dceejay)\
**Post date:** [27 April 2020 11:59 UTC](https://discourse.nodered.org/t/hide-tab-problem/25603/2 "2020-04-27T11:59:09Z")

</div>

hiding tabs is not meant to be a form of access control. There is no protection between tabs - if a user can see one they can in theory see them all if they know here to look.

---

<div class="post-metadata">

**Author:** ![iungo](https://sea2.discourse-cdn.com/flex026/user_avatar/discourse.nodered.org/iungo/32/8099_2.png) [@iungo](https://discourse.nodered.org/u/iungo)\
**Post date:** [28 April 2020 10:54 UTC](https://discourse.nodered.org/t/hide-tab-problem/25603/3 "2020-04-28T10:54:06Z")

</div>

I understand it.  
But I think it's a good idea to have an ability to totally hide it for dashboard user.

---

<div class="post-metadata">

**Author:** ![dceejay](https://sea2.discourse-cdn.com/flex026/user_avatar/discourse.nodered.org/dceejay/32/38_2.png) [@dceejay](https://discourse.nodered.org/u/dceejay)\
**Post date:** [28 April 2020 11:37 UTC](https://discourse.nodered.org/t/hide-tab-problem/25603/4 "2020-04-28T11:37:28Z")

</div>

it is totally hidden - unless they type in the url manually. (or someone provides them a link).  
If you really don't want it visible delete it entirely.

---

<div class="post-metadata">

**Author:** ![iungo](https://sea2.discourse-cdn.com/flex026/user_avatar/discourse.nodered.org/iungo/32/8099_2.png) [@iungo](https://discourse.nodered.org/u/iungo)\
**Post date:** [28 April 2020 11:56 UTC](https://discourse.nodered.org/t/hide-tab-problem/25603/5 "2020-04-28T11:56:45Z")

</div>

In my project I'm using a pin code to allow access to several tabs (settings, calibration etc)... so, I can't delete those pages entirely. I found only way to get it works thru hiding all groups in the tab. So by direct link user got a blank page.

---

<div class="post-metadata">

**Author:** ![system](https://us1.discourse-cdn.com/flex026/uploads/nodered/original/1X/d073cd938eafa2e558d7c2cd59003b3ef4963033.png) [@system](https://discourse.nodered.org/u/system)\
**Post date:** [28 May 2020 12:10 UTC](https://discourse.nodered.org/t/hide-tab-problem/25603/6 "2020-05-28T12:10:26Z")

</div>

This topic was automatically closed 30 days after the last reply. New replies are no longer allowed.