# Designer/Tag Security - Second Instance? **URL:** \ **Category:** Ignition\ **Created:** [April 4, 2012, 3:52pm UTC](https://forum.inductiveautomation.com/t/designer-tag-security-second-instance/4244 "2012-04-04T15:52:45Z")\ **Posts on this page:** 10\ **Page:** 1
**Author:** ![tomt](https://avatars.discourse-cdn.com/v4/letter/t/90ced4/32.png) [@tomt](https://forum.inductiveautomation.com/u/tomt)\ **Post date:** [April 4, 2012, 3:52pm UTC](https://forum.inductiveautomation.com/t/designer-tag-security-second-instance/4244/1 "2012-04-04T15:52:45Z")
Here’s my scenario: I have a tag database with our SCADA-like systems in it. I’m kicking around using Ignition to drive some digital signage that would be edited by other people. I’d like to ensure they don’t screw with my tag database. I don’t have a problem if they can see it, I just don’t want to move anything or change the properties. I know that once you are in designer, you have full access to edit any project and tag database that is configured on the system. I’m not as concerned with them changing the other project - just the tag database. Can I create a second “instance” that runs on different port numbers? I do need read access to my sql tag database from this second instance - can this be done by setting up a Database Provider in another instance? ---
**Author:** ![tomt](https://avatars.discourse-cdn.com/v4/letter/t/90ced4/32.png) [@tomt](https://forum.inductiveautomation.com/u/tomt)\ **Post date:** [April 11, 2012, 8:46pm UTC](https://forum.inductiveautomation.com/t/designer-tag-security-second-instance/4244/2 "2012-04-11T20:46:35Z")
Anyone? ---
**Author:** ![Kyle\_Chase](https://avatars.discourse-cdn.com/v4/letter/k/9de0a6/32.png) [@Kyle\_Chase](https://forum.inductiveautomation.com/u/Kyle_Chase)\ **Post date:** [April 11, 2012, 8:53pm UTC](https://forum.inductiveautomation.com/t/designer-tag-security-second-instance/4244/3 "2012-04-11T20:53:26Z")
Why not just create DB tags, and create a “designer” client project to edit those tag strings? ---
**Author:** ![Colby.Clegg](https://sea1.discourse-cdn.com/inductiveautomation/user_avatar/forum.inductiveautomation.com/colby.clegg/32/3282_2.png) [@Colby.Clegg](https://forum.inductiveautomation.com/u/Colby.Clegg)\ **Post date:** [April 12, 2012, 9:41pm UTC](https://forum.inductiveautomation.com/t/designer-tag-security-second-instance/4244/4 "2012-04-12T21:41:31Z")
Hi, Sorry for the lack of reply. I saw this when you first posted, and wanted to see what I could think of, but failed to get back to it. So, you want them to be able to edit the windows shown on the display, but not the tags, correct? Or are you simply trying to edit some of the tag values, but not the tags themselves? In this latter case something like Kyle said would be good, but in the first case, I’m not sure there is currently a good answer. The first thing that comes to mind is that perhaps we could add an option to limit tag editing to certain roles, so that you could create a login that was allowed in the designer, but not allowed to modify the configuration of tags. Would this be sufficient? Regards, ---
**Author:** ![nathan](https://avatars.discourse-cdn.com/v4/letter/n/c5a1d2/32.png) [@nathan](https://forum.inductiveautomation.com/u/nathan)\ **Post date:** [April 13, 2012, 3:15pm UTC](https://forum.inductiveautomation.com/t/designer-tag-security-second-instance/4244/5 "2012-04-13T15:15:40Z")
Does it make sense to implement a tag level design security structure as opposed to a larger developer/designer permission structure? I'm referring to design control permissions for: projects, windows, transaction groups and other such objects in addition to tags. To me it doesn't make sense to just do tags, unless that is somehow more significant than the others and/or much more natural to implement. > [@Colby.Clegg](#): > > The first thing that comes to mind is that perhaps we could add an option to limit tag editing to certain roles, so that you could create a login that was allowed in the designer, but not allowed to modify the configuration of tags. Would this be sufficient? ---
**Author:** ![Robert](https://avatars.discourse-cdn.com/v4/letter/r/e95f7d/32.png) [@Robert](https://forum.inductiveautomation.com/u/Robert)\ **Post date:** [April 13, 2012, 4:21pm UTC](https://forum.inductiveautomation.com/t/designer-tag-security-second-instance/4244/6 "2012-04-13T16:21:39Z")
Feature request created 🙂 ---
**Author:** ![gnguyen](https://avatars.discourse-cdn.com/v4/letter/g/41988e/32.png) [@gnguyen](https://forum.inductiveautomation.com/u/gnguyen)\ **Post date:** [April 14, 2012, 7:49am UTC](https://forum.inductiveautomation.com/t/designer-tag-security-second-instance/4244/7 "2012-04-14T07:49:45Z")
Yes, I really like the idea. +1 for feature request ! ---
**Author:** ![dep05d](https://avatars.discourse-cdn.com/v4/letter/d/e495f1/32.png) [@dep05d](https://forum.inductiveautomation.com/u/dep05d)\ **Post date:** [May 7, 2012, 7:32pm UTC](https://forum.inductiveautomation.com/t/designer-tag-security-second-instance/4244/8 "2012-05-07T19:32:24Z")
I’m potentially facing a similar issue as the OP. Multiple project owners: 1 gateway. I’d love to see role-based security for projects, tag providers, db connections, opc servers, etc. Thanks, Dan ---
**Author:** ![weertske](https://sea1.discourse-cdn.com/inductiveautomation/user_avatar/forum.inductiveautomation.com/weertske/32/3353_2.png) [@weertske](https://forum.inductiveautomation.com/u/weertske)\ **Post date:** [January 9, 2015, 7:36pm UTC](https://forum.inductiveautomation.com/t/designer-tag-security-second-instance/4244/9 "2015-01-09T19:36:38Z")
I know this is an old topic, but did anything ever happen with Nathan's suggestion that Ignition have a developer/designer permission structure? I have vendors that need access to their project on my Gateway and I am adverse to giving them access to the other projects. [quote="nathan"]Does it make sense to implement a tag level design security structure as opposed to a larger developer/designer permission structure? I'm referring to design control permissions for: projects, windows, transaction groups and other such objects in addition to tags. To me it doesn't make sense to just do tags, unless that is somehow more significant than the others and/or much more natural to implement. > [@Colby.Clegg](#): > > The first thing that comes to mind is that perhaps we could add an option to limit tag editing to certain roles, so that you could create a login that was allowed in the designer, but not allowed to modify the configuration of tags. Would this be sufficient?[/quote] ---
**Author:** ![greg.simpson](https://sea1.discourse-cdn.com/inductiveautomation/user_avatar/forum.inductiveautomation.com/greg.simpson/32/3135_2.png) [@greg.simpson](https://forum.inductiveautomation.com/u/greg.simpson)\ **Post date:** [March 9, 2015, 11:20pm UTC](https://forum.inductiveautomation.com/t/designer-tag-security-second-instance/4244/10 "2015-03-09T23:20:19Z")
There have been additions made to the security of the designer. You can find additional permissions settings in Project Properties. Additionally, tags providers can require certain roles as well. This is configured in the Ignition Gateway by editing the tag provider you would like to associate with a role.