# Uibuilder security

**URL:** <https://discourse.nodered.org/t/uibuilder-security/48635>\
**Category:** General\
**Created:** [20 July 2021 09:24 UTC](https://discourse.nodered.org/t/uibuilder-security/48635 "2021-07-20T09:24:16Z")\
**Posts on this page:** 1\
**Showing post:** 2

<div class="post-metadata">

**Author:** ![TotallyInformation](https://sea2.discourse-cdn.com/flex026/user_avatar/discourse.nodered.org/totallyinformation/32/31_2.png) [@TotallyInformation](https://discourse.nodered.org/u/TotallyInformation)\
**Post date:** [20 July 2021 21:57 UTC](https://discourse.nodered.org/t/uibuilder-security/48635/2 "2021-07-20T21:57:56Z")

</div>

> [@Janna](#):
>
> I am trying to secure a uibuilder site with the help of the built-in security

Hopefully you have read the caveats for the current releases? The security features are still in development.

Also, please check out this recent thread where I summarised how security is supposed to work and which bits might actually work at the moment.

> [@Uibuilder sqlite security.js](https://discourse.nodered.org/t/uibuilder-sqlite-security-js/48542/2):
>
> No such thing as a stupid question - though plenty of stupid answers anguished And in this case, certainly not stupid, a very reasonable question in fact. To use SQLlite or any other DB in security.js, you just need to remember that security.js is a node.js module. The code inside the exports section is used inside uibuilder.js which itself is, of course, inside Node-RED which runs under node.js. Any code outside the export isn't directly accessible to uibuilder but it IS accessible to the…

In there is also an offer to create a new branch of uibuilder so that people can collaborate on the security features.

From your posted image, I can see that you have sent a msg with `msg._auth.id` set to `null` which will never work as that is the one piece of information you absolutely must supply since nothing makes any sense without it. That is all documented in the technical docs.

---

_[View the full topic](https://discourse.nodered.org/t/uibuilder-security/48635)._
