# Ignition Perspective Application Protection **URL:** \ **Category:** Ignition\ **Tags:** ignition81, ignition80, perspective\ **Created:** [January 7, 2023, 11:35am UTC](https://forum.inductiveautomation.com/t/ignition-perspective-application-protection/68340 "2023-01-07T11:35:06Z")\ **Posts on this page:** 14\ **Page:** 1
**Author:** ![Goutham\_Rao\_Y](https://avatars.discourse-cdn.com/v4/letter/g/eb9ed0/32.png) [@Goutham\_Rao\_Y](https://forum.inductiveautomation.com/u/Goutham_Rao_Y)\ **Post date:** [January 7, 2023, 11:35am UTC](https://forum.inductiveautomation.com/t/ignition-perspective-application-protection/68340/1 "2023-01-07T11:35:07Z")
Hello team, Currently we are developing projects under perspective module. Needed few clarifications related to Application protection: 1. How can we make our application non-editable if we are providing it to someone else? 2. How to safeguard the entire Application[views, named queries and every setting related to application], so that even if the project is passed over to another, they shouldn't be allowed to modify any data present within the application. Application Built on: **Ignition Perspective Module** Please provide us with a solution to the scenario described above. ---
**Author:** ![mazeyrat](https://sea1.discourse-cdn.com/inductiveautomation/user_avatar/forum.inductiveautomation.com/mazeyrat/32/10955_2.png) [@mazeyrat](https://forum.inductiveautomation.com/u/mazeyrat)\ **Post date:** [January 7, 2023, 12:05pm UTC](https://forum.inductiveautomation.com/t/ignition-perspective-application-protection/68340/2 "2023-01-07T12:05:43Z")
> [@\[FEATURE\] Ignition 8 - project inherited - OEM lock](https://forum.inductiveautomation.com/t/feature-ignition-8-project-inherited-oem-lock/29170): > > With the new feature of project inheritable in Ignition 8, we would like to be able to lock access to the Project inherited by other project. Project Standard (locked - can’t be open or visible) =\> ressources are locked - Project Custom =\> can be modified and edited by end user Is there some plan for such a OEM lock feature in Ignition 8 ? ---
**Author:** ![pturmel](https://sea1.discourse-cdn.com/inductiveautomation/user_avatar/forum.inductiveautomation.com/pturmel/32/3295_2.png) [@pturmel](https://forum.inductiveautomation.com/u/pturmel)\ **Post date:** [January 7, 2023, 6:28pm UTC](https://forum.inductiveautomation.com/t/ignition-perspective-application-protection/68340/3 "2023-01-07T18:28:59Z")
> [@Goutham\_Rao\_Y](#): > > Please provide us with a solution to the scenario described above. There is no such solution. OEM lock is a feature request as noted above, but don't hold your breath. Consider creating an actual 3rd-party module in java containing the most critical parts of your solution. You can then control that with Ignition's licensing system. ---
**Author:** ![nideyijuyidong](https://avatars.discourse-cdn.com/v4/letter/n/7cd45c/32.png) [@nideyijuyidong](https://forum.inductiveautomation.com/u/nideyijuyidong)\ **Post date:** [January 8, 2023, 9:05am UTC](https://forum.inductiveautomation.com/t/ignition-perspective-application-protection/68340/4 "2023-01-08T09:05:37Z")
Just curious, is it not enough to provide customers with low-level accounts without development and gateway permissions? What is the vulnerability? ---
**Author:** ![Transistor](https://sea1.discourse-cdn.com/inductiveautomation/user_avatar/forum.inductiveautomation.com/transistor/32/3380_2.png) [@Transistor](https://forum.inductiveautomation.com/u/Transistor)\ **Post date:** [January 8, 2023, 9:11am UTC](https://forum.inductiveautomation.com/t/ignition-perspective-application-protection/68340/5 "2023-01-08T09:11:39Z")
> [@nideyijuyidong](#): > > ... is it not enough to provide customers with low-level accounts without development and gateway permissions? You might be providing an application to run on my server on which I do my own development and I would want administrator rights. ---
**Author:** ![nideyijuyidong](https://avatars.discourse-cdn.com/v4/letter/n/7cd45c/32.png) [@nideyijuyidong](https://forum.inductiveautomation.com/u/nideyijuyidong)\ **Post date:** [January 8, 2023, 9:40am UTC](https://forum.inductiveautomation.com/t/ignition-perspective-application-protection/68340/6 "2023-01-08T09:40:15Z")
I see. Customers cannot add content to my project. ---
**Author:** ![nminchin](https://sea1.discourse-cdn.com/inductiveautomation/user_avatar/forum.inductiveautomation.com/nminchin/32/6911_2.png) [@nminchin](https://forum.inductiveautomation.com/u/nminchin)\ **Post date:** [January 8, 2023, 6:33pm UTC](https://forum.inductiveautomation.com/t/ignition-perspective-application-protection/68340/7 "2023-01-08T18:33:04Z")
Anyone can reset the admin password with the gwcmd utility, thus anyone can gain access to your project development files to modify and essentially steal, which is the issue, particularly for OEMs wanting to offer ignition as a solution as they simply can't lock down their solution. Not that I would ever want to use the solution provided by an OEM... They're usually half baked and use terrible practice, at least in my experience ---
**Author:** ![nideyijuyidong](https://avatars.discourse-cdn.com/v4/letter/n/7cd45c/32.png) [@nideyijuyidong](https://forum.inductiveautomation.com/u/nideyijuyidong)\ **Post date:** [January 9, 2023, 12:10am UTC](https://forum.inductiveautomation.com/t/ignition-perspective-application-protection/68340/8 "2023-01-09T00:10:20Z")
Haha, I am oem. I agree with you that OEM has its own limitations, so we will continue to maintain and improve within one or two year after project acceptance. We also provide and maintain Ignition's servers as part of our service. Usually customers do not have administration to the server, and when they need to improve a project, they contact us. We will indicate in the contract which parts can be added or modified, but in the implementation process, we still rely heavily on business negotiations. English has helped me in the sense that my customers usually don't think they are capable of developing ignition, even if they have other scada development experience. ---
**Author:** ![Goutham\_Rao\_Y](https://avatars.discourse-cdn.com/v4/letter/g/eb9ed0/32.png) [@Goutham\_Rao\_Y](https://forum.inductiveautomation.com/u/Goutham_Rao_Y)\ **Post date:** [January 9, 2023, 12:33pm UTC](https://forum.inductiveautomation.com/t/ignition-perspective-application-protection/68340/9 "2023-01-09T12:33:33Z")
Hi all, I am confused weather you are providing a solution or a kind of discussion for telling if there are any possibilities. ---
**Author:** ![pascal.fragnoud](https://sea1.discourse-cdn.com/inductiveautomation/user_avatar/forum.inductiveautomation.com/pascal.fragnoud/32/24728_2.png) [@pascal.fragnoud](https://forum.inductiveautomation.com/u/pascal.fragnoud)\ **Post date:** [January 9, 2023, 12:50pm UTC](https://forum.inductiveautomation.com/t/ignition-perspective-application-protection/68340/10 "2023-01-09T12:50:59Z")
> [@nminchin](#): > > Anyone can reset the admin password with the gwcmd utility Anyone with access to the gwcmd utility. Which may not be the case, even for someone with designer access. ---
**Author:** ![nideyijuyidong](https://avatars.discourse-cdn.com/v4/letter/n/7cd45c/32.png) [@nideyijuyidong](https://forum.inductiveautomation.com/u/nideyijuyidong)\ **Post date:** [January 9, 2023, 1:12pm UTC](https://forum.inductiveautomation.com/t/ignition-perspective-application-protection/68340/11 "2023-01-09T13:12:01Z")
No. We provide Ignition server machines. Customers do not have the permission of the system. ---
**Author:** ![pturmel](https://sea1.discourse-cdn.com/inductiveautomation/user_avatar/forum.inductiveautomation.com/pturmel/32/3295_2.png) [@pturmel](https://forum.inductiveautomation.com/u/pturmel)\ **Post date:** [January 9, 2023, 2:12pm UTC](https://forum.inductiveautomation.com/t/ignition-perspective-application-protection/68340/12 "2023-01-09T14:12:34Z")
> [@nideyijuyidong](#): > > Customers do not have the permission Do you provide physical machines for your customers to install? Or do you run the servers in your own facilities? Because if they have physical possession, I doubt you can secure your projects from them. ---
**Author:** ![nideyijuyidong](https://avatars.discourse-cdn.com/v4/letter/n/7cd45c/32.png) [@nideyijuyidong](https://forum.inductiveautomation.com/u/nideyijuyidong)\ **Post date:** [January 9, 2023, 3:31pm UTC](https://forum.inductiveautomation.com/t/ignition-perspective-application-protection/68340/13 "2023-01-09T15:31:28Z")
Yes, we provide physical machines. We use VPN to connect all projects to my company. There is a clause in the contracts that if the customer operates the server by himself, the service will be terminated. But, yes, if they're determined to mess with my project, there's really nothing I can do to stop them. I have never seen anyone try to develop ignition by themselves, so I said English help me, they are all intimidated by the 700M manual pdf. ---
**Author:** ![nminchin](https://sea1.discourse-cdn.com/inductiveautomation/user_avatar/forum.inductiveautomation.com/nminchin/32/6911_2.png) [@nminchin](https://forum.inductiveautomation.com/u/nminchin)\ **Post date:** [January 9, 2023, 11:22pm UTC](https://forum.inductiveautomation.com/t/ignition-perspective-application-protection/68340/14 "2023-01-09T23:22:03Z")
> [@pascal.fragnoud](#): > > Anyone with access to the gwcmd utility. Which may not be the case, even for someone with designer All someone needs is a backup of the Ignition project which can be taken manually if you have file explorer access. And even if you don't, if someone is willing, they could easily get the files regardless.