# Gateway webpage, Launch Designer

**URL:** <https://forum.inductiveautomation.com/t/gateway-webpage-launch-designer/6030>\
**Category:** Ignition\
**Created:** [March 14, 2013, 11:19am UTC](https://forum.inductiveautomation.com/t/gateway-webpage-launch-designer/6030 "2013-03-14T11:19:47Z")\
**Posts on this page:** 6\
**Page:** 1

<div class="post-metadata">

**Author:** ![quper](https://avatars.discourse-cdn.com/v4/letter/q/aeb1de/32.png) [@quper](https://forum.inductiveautomation.com/u/quper)\
**Post date:** [March 14, 2013, 11:19am UTC](https://forum.inductiveautomation.com/t/gateway-webpage-launch-designer/6030/1 "2013-03-14T11:19:47Z")

</div>

Hello,  
It is possible to put every gateway page under password, but one thing is still unprotected: Launch Designer button. It means that everybody who knows my server IP can freely download my project.  
Is there some way to prevent it?

Thank you.

---

<div class="post-metadata">

**Author:** ![Duffanator](https://sea1.discourse-cdn.com/inductiveautomation/user_avatar/forum.inductiveautomation.com/duffanator/32/3560_2.png) [@Duffanator](https://forum.inductiveautomation.com/u/Duffanator)\
**Post date:** [March 14, 2013, 11:33am UTC](https://forum.inductiveautomation.com/t/gateway-webpage-launch-designer/6030/2 "2013-03-14T11:33:18Z")

</div>

Under Gateway Settings → Configure, set a role that only you are a part of in the “Designer Role(s)” section:

 ![](https://us1.discourse-cdn.com/inductiveautomation/original/2X/4/4f7b95db6b45a4a0e75f23993ee5cb4b28583d5a.png)  

Then only you will be able to log into the designer and open a project.

---

<div class="post-metadata">

**Author:** ![quper](https://avatars.discourse-cdn.com/v4/letter/q/aeb1de/32.png) [@quper](https://forum.inductiveautomation.com/u/quper)\
**Post date:** [March 14, 2013, 12:35pm UTC](https://forum.inductiveautomation.com/t/gateway-webpage-launch-designer/6030/3 "2013-03-14T12:35:51Z")

</div>

That’s true, to log into designer you have to insert credentials, but this is after you downloaded a project.  
You can still download a project freely.

---

<div class="post-metadata">

**Author:** ![Duffanator](https://sea1.discourse-cdn.com/inductiveautomation/user_avatar/forum.inductiveautomation.com/duffanator/32/3560_2.png) [@Duffanator](https://forum.inductiveautomation.com/u/Duffanator)\
**Post date:** [March 14, 2013, 12:55pm UTC](https://forum.inductiveautomation.com/t/gateway-webpage-launch-designer/6030/4 "2013-03-14T12:55:25Z")

</div>

No… you can’t choose to download a project until after you log in. It will download the designer files and then ask you for log in information, but it won’t download a project until after you log in.

Or at least that’s how it works for me, but I have multiple projects on my gateway. Maybe if you only have one project it downloads it right away? You could create another dummy project and test that theory.

---

<div class="post-metadata">

**Author:** ![anna](https://avatars.discourse-cdn.com/v4/letter/a/779978/32.png) [@anna](https://forum.inductiveautomation.com/u/anna)\
**Post date:** [March 14, 2013, 3:57pm UTC](https://forum.inductiveautomation.com/t/gateway-webpage-launch-designer/6030/5 "2013-03-14T15:57:59Z")

</div>

Starting the Designer does not really download the project data at any point - the data is stored in / pulled from Ignition’s internal database.

Here is what may help you address your security concerns:

The designer is password-protected. The Gateway’s Configure page, from which the Designer gets launched, is password-protected. Configuration / Gateway settings section on the Gateway’s configuration page allows you to assign roles for Gateway Configuration and the Designer itself, among others. Protecting those pages would prevent an unauthorized user from gaining access to your project via downloading a .proj and opening it in another system’s Designer which they may have access to.

And, of course, roles can be used to grand access to the project, specific pages / windows of the project and components of the window on the client side.

---

<div class="post-metadata">

**Author:** ![quper](https://avatars.discourse-cdn.com/v4/letter/q/aeb1de/32.png) [@quper](https://forum.inductiveautomation.com/u/quper)\
**Post date:** [March 20, 2013, 7:51am UTC](https://forum.inductiveautomation.com/t/gateway-webpage-launch-designer/6030/6 "2013-03-20T07:51:15Z")

</div>

Thank you for explaining that to me.