# User permission scoped to a flow/tab in editor

**URL:** https://discourse.nodered.org/t/user-permission-scoped-to-a-flow-tab-in-editor/97378
**Category:** Feature Requests
**Tags:** security
**Created:** [2 June 2025 10:12 UTC](https://discourse.nodered.org/t/user-permission-scoped-to-a-flow-tab-in-editor/97378 "2025-06-02T10:12:00Z")
**Posts on this page:** 2
**Page:** 1

<div class="post-metadata">

### Author: ![JpEncausse](https://sea2.discourse-cdn.com/flex026/user_avatar/discourse.nodered.org/jpencausse/32/2561_2.png) [@JpEncausse](https://discourse.nodered.org/u/JpEncausse)
#### Post date: [2 June 2025 10:12 UTC](https://discourse.nodered.org/t/user-permission-scoped-to-a-flow-tab-in-editor/97378/1 "2025-06-02T10:12:00Z")

</div>

Hello, I'd like to limite a Node-RED user permission to a subset of flow/tab in admin editor

**Context** :

I setup a kind of sandbox with

- a Setup Tab to init variables, and a Websocket Node for instance
- a User1 Tab that will receive some data from websocket node and can handle it
- a User2 Tab that will receive some data from websocket node and can handle it

The User1 can or cannot look into setup tab but it should not change it. Where it could do what it want in it's tab.

I read in the forum right granularity are fine. I agree.  
My usecase is borderline. I just want "User1" to focus on it's tab and don't messed-up "User2" tab of Setup. In fact it could because it can write code ...

---

<div class="post-metadata">

### Author: ![system](https://us1.discourse-cdn.com/flex026/uploads/nodered/original/1X/d073cd938eafa2e558d7c2cd59003b3ef4963033.png) [@system](https://discourse.nodered.org/u/system)
#### Post date: [1 August 2025 10:12 UTC](https://discourse.nodered.org/t/user-permission-scoped-to-a-flow-tab-in-editor/97378/2 "2025-08-01T10:12:34Z")

</div>

This topic was automatically closed 60 days after the last reply. New replies are no longer allowed.
