# Project Security

**URL:** <https://forum.inductiveautomation.com/t/project-security/9815>\
**Category:** Ignition\
**Created:** [March 18, 2015, 4:29pm UTC](https://forum.inductiveautomation.com/t/project-security/9815 "2015-03-18T16:29:57Z")\
**Posts on this page:** 4\
**Page:** 1

<div class="post-metadata">

**Author:** ![AJBerera](https://avatars.discourse-cdn.com/v4/letter/a/9fc29f/32.png) [@AJBerera](https://forum.inductiveautomation.com/u/AJBerera)\
**Post date:** [March 18, 2015, 4:29pm UTC](https://forum.inductiveautomation.com/t/project-security/9815/1 "2015-03-18T16:29:57Z")

</div>

The client requires access to Configuration on the Gateway to manage devices, connections, and project backups so I gave them a username with the permission to do these things.  
I set the designer access to a role that only I have access to but, I realize that since they have administrative rights on the gateway, they can simply change their own permissions to get into the designer.  
How can I keep them out of the designer, while they maintain control over the gateway (and the Db)

---

<div class="post-metadata">

**Author:** ![Paullys50](https://sea1.discourse-cdn.com/inductiveautomation/user_avatar/forum.inductiveautomation.com/paullys50/32/3324_2.png) [@Paullys50](https://forum.inductiveautomation.com/u/Paullys50)\
**Post date:** [March 18, 2015, 9:32pm UTC](https://forum.inductiveautomation.com/t/project-security/9815/2 "2015-03-18T21:32:25Z")

</div>

I don’ t have an answer, more curious. If they have access to the configuration of the gateway for valid reasons, why can’t they access the designer?

---

<div class="post-metadata">

**Author:** ![nmudge](https://sea1.discourse-cdn.com/inductiveautomation/user_avatar/forum.inductiveautomation.com/nmudge/32/3394_2.png) [@nmudge](https://forum.inductiveautomation.com/u/nmudge)\
**Post date:** [March 18, 2015, 10:42pm UTC](https://forum.inductiveautomation.com/t/project-security/9815/3 "2015-03-18T22:42:52Z")

</div>

I don’t think there is a way to prevent access to the Designer once someone has access to the Gateway configuration.

---

<div class="post-metadata">

**Author:** ![AJBerera](https://avatars.discourse-cdn.com/v4/letter/a/9fc29f/32.png) [@AJBerera](https://forum.inductiveautomation.com/u/AJBerera)\
**Post date:** [March 19, 2015, 1:00pm UTC](https://forum.inductiveautomation.com/t/project-security/9815/4 "2015-03-19T13:00:08Z")

</div>

I’m sure there is something I could script into the project to kill the designer if you have the wrong credentials.