# Tab with credentials?

**URL:** <https://discourse.nodered.org/t/tab-with-credentials/13478>\
**Category:** Dashboard\
**Created:** [19 July 2019 09:46 UTC](https://discourse.nodered.org/t/tab-with-credentials/13478 "2019-07-19T09:46:32Z")\
**Posts on this page:** 10\
**Page:** 1

<div class="post-metadata">

**Author:** ![robertocanton](https://avatars.discourse-cdn.com/v4/letter/r/e36b37/32.png) [@robertocanton](https://discourse.nodered.org/u/robertocanton)\
**Post date:** [19 July 2019 09:46 UTC](https://discourse.nodered.org/t/tab-with-credentials/13478/1 "2019-07-19T09:46:32Z")

</div>

Hi, i'm using dashboard and i need a tab with credentials to show the content of it.  
How can i achive this?

---

<div class="post-metadata">

**Author:** ![Colin](https://sea2.discourse-cdn.com/flex026/user_avatar/discourse.nodered.org/colin/32/17040_2.png) [@Colin](https://discourse.nodered.org/u/Colin)\
**Post date:** [19 July 2019 09:58 UTC](https://discourse.nodered.org/t/tab-with-credentials/13478/2 "2019-07-19T09:58:28Z")

</div>

Do you mean you want to show all the credentials (I believe it is not possible to de-crypt the credentials), or do you mean you want the user to have to logon in order to view the dashboard?

---

<div class="post-metadata">

**Author:** ![robertocanton](https://avatars.discourse-cdn.com/v4/letter/r/e36b37/32.png) [@robertocanton](https://discourse.nodered.org/u/robertocanton)\
**Post date:** [19 July 2019 10:06 UTC](https://discourse.nodered.org/t/tab-with-credentials/13478/3 "2019-07-19T10:06:51Z")

</div>

the second one!  
I need to do a tab with system setting and only a specific user can change those settings.  
So when clikking on the tab i need a logon window/popup or somthing like that to grant the specific user to see what that page contain and change it.

---

<div class="post-metadata">

**Author:** ![Colin](https://sea2.discourse-cdn.com/flex026/user_avatar/discourse.nodered.org/colin/32/17040_2.png) [@Colin](https://discourse.nodered.org/u/Colin)\
**Post date:** [19 July 2019 10:17 UTC](https://discourse.nodered.org/t/tab-with-credentials/13478/4 "2019-07-19T10:17:54Z")

</div>

You can configure the standard dashboard so that only logged on users can access the complete dashboard but I do not believe it is possible to configure access to individual tabs. If you search the forum you will find a number of threads discussing alternative ways of achieving this.

---

<div class="post-metadata">

**Author:** ![robertocanton](https://avatars.discourse-cdn.com/v4/letter/r/e36b37/32.png) [@robertocanton](https://discourse.nodered.org/u/robertocanton)\
**Post date:** [19 July 2019 10:21 UTC](https://discourse.nodered.org/t/tab-with-credentials/13478/5 "2019-07-19T10:21:59Z")

</div>

I think i can achive this by securing a specific url (the url of the tab) somewhere in the settings file i guess.Am i right?  
Do u know how to do this?

---

<div class="post-metadata">

**Author:** ![Colin](https://sea2.discourse-cdn.com/flex026/user_avatar/discourse.nodered.org/colin/32/17040_2.png) [@Colin](https://discourse.nodered.org/u/Colin)\
**Post date:** [19 July 2019 10:25 UTC](https://discourse.nodered.org/t/tab-with-credentials/13478/6 "2019-07-19T10:25:33Z")

</div>

I do not believe that is possible.

---

<div class="post-metadata">

**Author:** ![robertocanton](https://avatars.discourse-cdn.com/v4/letter/r/e36b37/32.png) [@robertocanton](https://discourse.nodered.org/u/robertocanton)\
**Post date:** [19 July 2019 10:28 UTC](https://discourse.nodered.org/t/tab-with-credentials/13478/7 "2019-07-19T10:28:34Z")

</div>

🙁  
Really i need this feature.

---

<div class="post-metadata">

**Author:** ![dceejay](https://sea2.discourse-cdn.com/flex026/user_avatar/discourse.nodered.org/dceejay/32/38_2.png) [@dceejay](https://discourse.nodered.org/u/dceejay)\
**Post date:** [19 July 2019 10:46 UTC](https://discourse.nodered.org/t/tab-with-credentials/13478/8 "2019-07-19T10:46:54Z")

</div>

You may be better building off the contrib uibuilder project. This is a lot more bare bones but gives you a lot more control of endpoints and ability to add authentication schemes of your own. You do of course then have to add all your own widgets etc but it may be what you need.

---

<div class="post-metadata">

**Author:** ![robertocanton](https://avatars.discourse-cdn.com/v4/letter/r/e36b37/32.png) [@robertocanton](https://discourse.nodered.org/u/robertocanton)\
**Post date:** [19 July 2019 13:05 UTC](https://discourse.nodered.org/t/tab-with-credentials/13478/9 "2019-07-19T13:05:46Z")

</div>

thanks for your reply.  
I could try a more soft way.  
what's about to create a form with the dashboard block "template" and trying use the auth config located in the settings file?

---

<div class="post-metadata">

**Author:** ![TotallyInformation](https://sea2.discourse-cdn.com/flex026/user_avatar/discourse.nodered.org/totallyinformation/32/31_2.png) [@TotallyInformation](https://discourse.nodered.org/u/TotallyInformation)\
**Post date:** [19 July 2019 20:21 UTC](https://discourse.nodered.org/t/tab-with-credentials/13478/10 "2019-07-19T20:21:02Z")

</div>

You first need to understand how Dashboard works.

Those "tabs" are actually all one single endpoint - a single page. You cannot have a tab that is secured without having the whole Dashboard (a single page remember) secured - it is impossible. Anything that you do to make it _look_ as though you are securing a single tab will be a fudge and very unlikely to provide any real security.

You will be much better off using something else to create your settings page and simply to link to it from the Dashboard if you still need to use the Dashboard.

uibuilder is an easy way to do this. You would build a single page with your settings and secure that with ExpressJS middleware. Put a link to it on your Dashboard and a link back to the Dashboard from the settings page.