# User editor permissions

**URL:** <https://discourse.nodered.org/t/user-editor-permissions/83804>\
**Category:** General\
**Tags:** security\
**Created:** [18 December 2023 10:21 UTC](https://discourse.nodered.org/t/user-editor-permissions/83804 "2023-12-18T10:21:44Z")\
**Posts on this page:** 4\
**Page:** 1

<div class="post-metadata">

**Author:** ![SandeepA](https://sea2.discourse-cdn.com/flex026/user_avatar/discourse.nodered.org/sandeepa/32/63225_2.png) [@SandeepA](https://discourse.nodered.org/u/SandeepA)\
**Post date:** [18 December 2023 10:21 UTC](https://discourse.nodered.org/t/user-editor-permissions/83804/1 "2023-12-18T10:21:44Z")

</div>

While i have am aware that today we dont have fine grained user permissions. Can you share a tentative roadmap - just to understand if its something which is planned for v4 ?

Suggestion :  
Today we have user level data stored in .config.users.json.  
Maybe - one option can be the permissions be defined in settings or available via. user\_authentication - in following form for each user

permissions : [inject.write, group.A.write, group.B.write, tab.A.write, tab.B.write,"read"]

(group.A.write - means user can edit group with name as A . All groups with name A will have same permission.)  
(tab.A.write - means user can edit tab with as A . All tabs with name A will have same permission.)

I understand this is not the best mechanism and better option would be to define permissions at a role level - and the same role be defined for multiple users. But in the absence of anything above may be an interim approach.

Having the above - even if without a GUI will allow some ability to define such granularity.

Please suggest if such is possible.

---

<div class="post-metadata">

**Author:** ![TotallyInformation](https://sea2.discourse-cdn.com/flex026/user_avatar/discourse.nodered.org/totallyinformation/32/31_2.png) [@TotallyInformation](https://discourse.nodered.org/u/TotallyInformation)\
**Post date:** [18 December 2023 13:20 UTC](https://discourse.nodered.org/t/user-editor-permissions/83804/2 "2023-12-18T13:20:24Z")

</div>

Hi, I took the liberty of updating the title to indicate that you are interested in Editor permissions - please revert if I got that wrong.

---

<div class="post-metadata">

**Author:** ![SandeepA](https://sea2.discourse-cdn.com/flex026/user_avatar/discourse.nodered.org/sandeepa/32/63225_2.png) [@SandeepA](https://discourse.nodered.org/u/SandeepA)\
**Post date:** [18 December 2023 19:40 UTC](https://discourse.nodered.org/t/user-editor-permissions/83804/3 "2023-12-18T19:40:36Z")

</div>

This is indeed correct. Thanks @TotallyInformation

---

<div class="post-metadata">

**Author:** ![system](https://us1.discourse-cdn.com/flex026/uploads/nodered/original/1X/d073cd938eafa2e558d7c2cd59003b3ef4963033.png) [@system](https://discourse.nodered.org/u/system)\
**Post date:** [16 February 2024 19:41 UTC](https://discourse.nodered.org/t/user-editor-permissions/83804/4 "2024-02-16T19:41:30Z")

</div>

This topic was automatically closed 60 days after the last reply. New replies are no longer allowed.