# \[BUG-6526\]Tag Security is Ignored by Property Bindings **URL:** \ **Category:** Ignition\ **Tags:** security, perspective\ **Created:** [August 26, 2022, 5:06pm UTC](https://forum.inductiveautomation.com/t/bug-6526-tag-security-is-ignored-by-property-bindings/63509 "2022-08-26T17:06:44Z")\ **Posts on this page:** 4\ **Page:** 1
**Author:** ![Ben\_Walker](https://avatars.discourse-cdn.com/v4/letter/b/278dde/32.png) [@Ben\_Walker](https://forum.inductiveautomation.com/u/Ben_Walker)\ **Post date:** [August 26, 2022, 5:06pm UTC](https://forum.inductiveautomation.com/t/bug-6526-tag-security-is-ignored-by-property-bindings/63509/1 "2022-08-26T17:06:44Z")
Hi, I’m using Ignition Edge 8.1.18 with Perspective. I pass in a view parameter to a screen (an integer), and then I use that parameter to indirectly bind a UDT (tag) to a custom property in the screen. Finally, I bind controls on the screen to the custom property. With the above approach, when a user edits tags via controls on the screen, all of the underlying tag security settings appear to be ignored. For example, I have a BOOL tag with write restricted to authenticated users, and it’s bound to a checkbox on the screen. If I bind the tag directly to the checkbox, it prevents writes with a security alert. However, if I bind the checkbox to the custom property (which is bound to the tag), the write is allowed and there is no security alert. Likewise the screen even ignores read-only restrictions on the tag and writes values anyway. This binding approach (custom property) provides major advantages to me because I can avoid filling the screen with indirect tag bindings and have easier maintenance/updates. However, with this unexpected security behavior, it won’t be functional. I haven’t been able to figure out if this is a bug or a feature from Google or the docs. I would appreciate feedback on this. Thanks! ---
**Author:** ![Ben\_Walker](https://avatars.discourse-cdn.com/v4/letter/b/278dde/32.png) [@Ben\_Walker](https://forum.inductiveautomation.com/u/Ben_Walker)\ **Post date:** [August 26, 2022, 7:38pm UTC](https://forum.inductiveautomation.com/t/bug-6526-tag-security-is-ignored-by-property-bindings/63509/2 "2022-08-26T19:38:48Z")
**Additional information:** To reproduce the issue, a nested UDT is required. If you bind a control as described above (via a custom property) to a child tag of a single UDT, security applies as expected. However, if you bind to a tag that is a child of a nested UDT, security fails to apply. The examples below were reproduced by a colleague as well on standard Ignition (non-Edge). **------- Example 1 (fails) -------** Target Tag: _ **PadUdt\TankUdt\TopLevel** _ ( **TopLevel** has restricted security) Bind _ **PadUdt** _ to _ **MyPad** _ (Custom Property) in the screen (direct or indirect) Bind a control to _ **view.custom.MyPad.TankUdt.TopLevel** _ **------- Example 2 (fails) -------** Target Tag: _ **PadUdt\TankUdt\TopLevel** _ ( **TopLevel** has restricted security) Bind _ **PadUdt\TankUdt** _ to _ **MyTank** _ (Custom Property) in the screen (direct or indirect) Bind a control to _ **view.custom.MyTank.TopLevel** _ **------- Example 3 (Works) -------** Target Tag: _ **PadUdt\Active** _ ( **Active** has restricted security) Bind _ **PadUdt** _ to _ **MyPad** _ (Custom Property) in the screen (direct or indirect) Bind a control to _ **view.custom.MyPad.Active** _ ---
**Author:** ![ggross](https://sea1.discourse-cdn.com/inductiveautomation/user_avatar/forum.inductiveautomation.com/ggross/32/12668_2.png) [@ggross](https://forum.inductiveautomation.com/u/ggross)\ **Post date:** [August 26, 2022, 10:24pm UTC](https://forum.inductiveautomation.com/t/bug-6526-tag-security-is-ignored-by-property-bindings/63509/3 "2022-08-26T22:24:37Z")
I have been able to duplicate this issue and a bug has been created. One thing I did notice was even your 3rd example was writing to the tag. I appreciate your taking the time to write up replication steps. Thanks, Garth ---
**Author:** ![nminchin](https://sea1.discourse-cdn.com/inductiveautomation/user_avatar/forum.inductiveautomation.com/nminchin/32/6911_2.png) [@nminchin](https://forum.inductiveautomation.com/u/nminchin)\ **Post date:** [August 28, 2022, 12:32pm UTC](https://forum.inductiveautomation.com/t/bug-6526-tag-security-is-ignored-by-property-bindings/63509/4 "2022-08-28T12:32:40Z")
In any case, I’d suggest binding the component’s enabled condition to the canWrite property of the tag so operators don’t have to click the button to know they can’t click it