Node-red multi-user workaround

Those statements appear to be contradictory. You say the user only views the database, then you say he has to modify the database.
Whatever the situation is, if you use mqtt to communicate back to the main node-red server then the data update can be done there, locally to node-red.