# \[BUG\] Modify Source View Option Bypasses Designer View Protection Lock

**URL:** <https://forum.inductiveautomation.com/t/bug-modify-source-view-option-bypasses-designer-view-protection-lock/77750>\
**Category:** Ignition\
**Tags:** ignition81, perspective\
**Created:** [August 11, 2023, 11:44am UTC](https://forum.inductiveautomation.com/t/bug-modify-source-view-option-bypasses-designer-view-protection-lock/77750 "2023-08-11T11:44:32Z")\
**Posts on this page:** 6\
**Page:** 1

<div class="post-metadata">

**Author:** ![liam1](https://avatars.discourse-cdn.com/v4/letter/l/e68b1a/32.png) [@liam1](https://forum.inductiveautomation.com/u/liam1)\
**Post date:** [August 11, 2023, 11:44am UTC](https://forum.inductiveautomation.com/t/bug-modify-source-view-option-bypasses-designer-view-protection-lock/77750/1 "2023-08-11T11:44:32Z")

</div>

Hi everyone,

We have a project which we need to restrict access to viewing certain views.

When trying to access a protected view from the project browser, it works correctly and blocks access

When I add an instance of the view to different a non protected view, I am still able to right click on the instance and select modify source view. This bypasses the standard behavior found when trying to access it in the Project Browser.

I believe the modify source view option should disappear from the context menu for a protected resource.

Let me know if this was intended behavior.

The reason I'm asking, is because we need to provide project access to a client and want to protect parts of the project which contain our IP (Intellectual Property).

---

<div class="post-metadata">

**Author:** ![Transistor](https://sea1.discourse-cdn.com/inductiveautomation/user_avatar/forum.inductiveautomation.com/transistor/32/3380_2.png) [@Transistor](https://forum.inductiveautomation.com/u/Transistor)\
**Post date:** [August 11, 2023, 12:16pm UTC](https://forum.inductiveautomation.com/t/bug-modify-source-view-option-bypasses-designer-view-protection-lock/77750/2 "2023-08-11T12:16:09Z")

</div>

You'll be interested in this thread:

> [@Best practice to prevent to stolen ignition resources](https://forum.inductiveautomation.com/t/best-practice-to-prevent-to-stolen-ignition-resources/44344/98):
>
> If it is that valuable, it should be easy to justify a little bit of time to make it a compiled resource instead of a script.

---

<div class="post-metadata">

**Author:** ![liam1](https://avatars.discourse-cdn.com/v4/letter/l/e68b1a/32.png) [@liam1](https://forum.inductiveautomation.com/u/liam1)\
**Post date:** [August 11, 2023, 12:26pm UTC](https://forum.inductiveautomation.com/t/bug-modify-source-view-option-bypasses-designer-view-protection-lock/77750/3 "2023-08-11T12:26:08Z")

</div>

The issue is based around a inconsistent implementation of the protection behavior.

If the view is protected, the "modify resource view" option should behave the same as is does in the project browser and prevent the user from accessing the resource.

---

<div class="post-metadata">

**Author:** ![pturmel](https://sea1.discourse-cdn.com/inductiveautomation/user_avatar/forum.inductiveautomation.com/pturmel/32/3295_2.png) [@pturmel](https://forum.inductiveautomation.com/u/pturmel)\
**Post date:** [August 11, 2023, 12:57pm UTC](https://forum.inductiveautomation.com/t/bug-modify-source-view-option-bypasses-designer-view-protection-lock/77750/4 "2023-08-11T12:57:33Z")

</div>

The "protection" is just to prevent unwanted modification. It is not for securing your system from prying eyes. Anyone with designer access can get around any security in the gateway and work with any non-compiled resource.

Really, read that topic.

---

<div class="post-metadata">

**Author:** ![paul-griffith](https://sea1.discourse-cdn.com/inductiveautomation/user_avatar/forum.inductiveautomation.com/paul-griffith/32/37249_2.png) [@paul-griffith](https://forum.inductiveautomation.com/u/paul-griffith)\
**Post date:** [August 11, 2023, 1:02pm UTC](https://forum.inductiveautomation.com/t/bug-modify-source-view-option-bypasses-designer-view-protection-lock/77750/5 "2023-08-11T13:02:57Z")

</div>

What version of Ignition are you using? A recent bug fix was supposed to fix several issues like this, though it's possible this slipped through the cracks.

---

<div class="post-metadata">

**Author:** ![liam1](https://avatars.discourse-cdn.com/v4/letter/l/e68b1a/32.png) [@liam1](https://forum.inductiveautomation.com/u/liam1)\
**Post date:** [August 14, 2023, 5:43am UTC](https://forum.inductiveautomation.com/t/bug-modify-source-view-option-bypasses-designer-view-protection-lock/77750/6 "2023-08-14T05:43:40Z")

</div>

Our Ignition Gateway version is 8.1.28 (b2023060110)
