# Permissions settings when using Twitter OpenID authentification

**URL:** <https://discourse.nodered.org/t/permissions-settings-when-using-twitter-openid-authentification/23376>\
**Category:** General\
**Created:** [20 March 2020 21:51 UTC](https://discourse.nodered.org/t/permissions-settings-when-using-twitter-openid-authentification/23376 "2020-03-20T21:51:23Z")\
**Posts on this page:** 2\
**Page:** 1

<div class="post-metadata">

**Author:** ![kybsmiling](https://avatars.discourse-cdn.com/v4/letter/k/9e8a1a/32.png) [@kybsmiling](https://discourse.nodered.org/u/kybsmiling)\
**Post date:** [20 March 2020 21:51 UTC](https://discourse.nodered.org/t/permissions-settings-when-using-twitter-openid-authentification/23376/1 "2020-03-20T21:51:23Z")

</div>

If I am going to use Twitter OpenID authentication, do I still need to put all users into settings.js to give them their permissions? Is this correct, or do I miss something?

If I would set up my own OpenID Server (e.g. Keycloak), could I set up the permissions in the OpenID server for each user, and then I would not need to manual put users and permissions into settings.js?

My settings.js for Twitter looks like this, with the usernames and permissions included.

```auto
adminAuth: {
    type:"strategy",
    strategy: {
        name: "twitter",
        label: 'Sign in with Twitter',
        icon:"fa-twitter",
        strategy: require("passport-twitter").Strategy,
        options: {
            consumerKey: TWITTER_APP_CONSUMER_KEY,
            consumerSecret: TWITTER_APP_CONSUMER_SECRET,
            callbackURL: "http://[my host name here]/auth/strategy/callback",
            verify: function(token, tokenSecret, profile, done) {
                done(null, profile);
            }
        },
    },
    users: [
       { username: "Admin", permissions: ["*"]},
       { username: "UserA", permissions; ['Read']}
    ]
};

```

---

<div class="post-metadata">

**Author:** ![system](https://us1.discourse-cdn.com/flex026/uploads/nodered/original/1X/d073cd938eafa2e558d7c2cd59003b3ef4963033.png) [@system](https://discourse.nodered.org/u/system)\
**Post date:** [19 May 2020 21:51 UTC](https://discourse.nodered.org/t/permissions-settings-when-using-twitter-openid-authentification/23376/2 "2020-05-19T21:51:32Z")

</div>

Closed on 19 May 2020 21:51 UTC

This topic was automatically closed 60 days after the last reply. New replies are no longer allowed.