# Restrict Node-Write Abilities by user

**URL:** <https://discourse.nodered.org/t/restrict-node-write-abilities-by-user/75237>\
**Category:** General\
**Created:** [15 February 2023 13:36 UTC](https://discourse.nodered.org/t/restrict-node-write-abilities-by-user/75237 "2023-02-15T13:36:07Z")\
**Posts on this page:** 4\
**Page:** 1

<div class="post-metadata">

**Author:** ![pbahr](https://avatars.discourse-cdn.com/v4/letter/p/87869e/32.png) [@pbahr](https://discourse.nodered.org/u/pbahr)\
**Post date:** [15 February 2023 13:36 UTC](https://discourse.nodered.org/t/restrict-node-write-abilities-by-user/75237/1 "2023-02-15T13:36:08Z")

</div>

Hey there,

for my current project I have this use case that some users should be able to administrate all nodes, while others should only be able to access "harmless"-Nodes.

In specific I want built-in nodes as "HTTP-IN" and "MQTT-IN" to be executable by the restricted user, but not writeable.

IF that doesn't work on this level it would be an option to disable some node at all for some users. So to speak completely exclude some nodes from the built-in palette. Is that possible somehow?

Im happy for any suggestions.

Regards,  
Pirmin

---

<div class="post-metadata">

**Author:** ![knolleary](https://sea2.discourse-cdn.com/flex026/user_avatar/discourse.nodered.org/knolleary/32/3_2.png) [@knolleary](https://discourse.nodered.org/u/knolleary)\
**Post date:** [15 February 2023 16:41 UTC](https://discourse.nodered.org/t/restrict-node-write-abilities-by-user/75237/2 "2023-02-15T16:41:46Z")

</div>

Hi @pbahr

The editor doesnt have the sort of granular permissions you are looking for.

It is something that has occasionally come up in discussions here, but nothing is currently planned.

---

<div class="post-metadata">

**Author:** ![pbahr](https://avatars.discourse-cdn.com/v4/letter/p/87869e/32.png) [@pbahr](https://discourse.nodered.org/u/pbahr)\
**Post date:** [16 February 2023 07:03 UTC](https://discourse.nodered.org/t/restrict-node-write-abilities-by-user/75237/4 "2023-02-16T07:03:56Z")

</div>

Hi @knolleary,

thanks for the reply.  
I saw that its at least possible in general trough the nodeExclude Parameter in settings.

That's something to start with.

---

<div class="post-metadata">

**Author:** ![system](https://us1.discourse-cdn.com/flex026/uploads/nodered/original/1X/d073cd938eafa2e558d7c2cd59003b3ef4963033.png) [@system](https://discourse.nodered.org/u/system)\
**Post date:** [2 March 2023 07:04 UTC](https://discourse.nodered.org/t/restrict-node-write-abilities-by-user/75237/5 "2023-03-02T07:04:01Z")

</div>

This topic was automatically closed 14 days after the last reply. New replies are no longer allowed.