# Help with security issue in user profiles

**URL:** <https://community.glideapps.com/t/help-with-security-issue-in-user-profiles/21223>\
**Category:** Report a Bug\
**Created:** [January 15, 2021, 7:20pm UTC](https://community.glideapps.com/t/help-with-security-issue-in-user-profiles/21223 "2021-01-15T19:20:52Z")\
**Posts on this page:** 8\
**Page:** 1

<div class="post-metadata">

**Author:** ![Micheline\_K](https://sea2.discourse-cdn.com/flex002/user_avatar/community.glideapps.com/micheline_k/32/18864_2.png) [@Micheline\_K](https://community.glideapps.com/u/Micheline_K)\
**Post date:** [January 15, 2021, 7:20pm UTC](https://community.glideapps.com/t/help-with-security-issue-in-user-profiles/21223/1 "2021-01-15T19:20:52Z")

</div>

Hi everyone, I’m looking for some advice on this issue as I haven’t been able to find a solution yet. I have a Glide Pro account (public with email).

In my app, I have two types of users, let’s say **clients** and **professionals**.

I display the professionals profiles in the app but I want to keep the client data secure. I can’t use Row Owners in the User Profiles tab because then I can’t display all of my professionals profiles. If I use Protected columns for emails, for example, then users can’t share any information between users.

So, I’m not sure how to best secure my app…

The only solution I’ve found is to query the User Profiles tab in Excel to have a copy of it and remove any private fields and use the ‘copy’ as the Public Profiles tab.

**Is there a better solution here?** I would ideally like to have only one User Profiles tab to avoid confusion. If I accidently edit something in the query tab, I lose everything and have to start over…

Thank you!!

---

<div class="post-metadata">

**Author:** ![kyleheney](https://sea2.discourse-cdn.com/flex002/user_avatar/community.glideapps.com/kyleheney/32/41173_2.png) [@kyleheney](https://community.glideapps.com/u/kyleheney)\
**Post date:** [January 15, 2021, 7:25pm UTC](https://community.glideapps.com/t/help-with-security-issue-in-user-profiles/21223/2 "2021-01-15T19:25:07Z")

</div>

Would it make sense to create a separate “Professionals” sheet, then use Row Owners on your User Profile sheet? Then, you can create a relation from the Professionals sheet (that is unprotected) to the User Profile sheet, so that the Professionals can still access their protected profiles for editing, but other users would only access the data in the “Professionals” sheet (and their own User Profile).

---

<div class="post-metadata">

**Author:** ![Micheline\_K](https://sea2.discourse-cdn.com/flex002/user_avatar/community.glideapps.com/micheline_k/32/18864_2.png) [@Micheline\_K](https://community.glideapps.com/u/Micheline_K)\
**Post date:** [January 15, 2021, 7:40pm UTC](https://community.glideapps.com/t/help-with-security-issue-in-user-profiles/21223/3 "2021-01-15T19:40:34Z")

</div>

Thanks for your quick reply @kyleheney !

I had tried that a while ago but realized that if I click the user profile from the menu, it only pulled from one tab (User Profiles) for all users. Does that make sense?

---

<div class="post-metadata">

**Author:** ![kyleheney](https://sea2.discourse-cdn.com/flex002/user_avatar/community.glideapps.com/kyleheney/32/41173_2.png) [@kyleheney](https://community.glideapps.com/u/kyleheney)\
**Post date:** [January 15, 2021, 8:44pm UTC](https://community.glideapps.com/t/help-with-security-issue-in-user-profiles/21223/4 "2021-01-15T20:44:05Z")

</div>

No problem.

Yes, the user profiles sheet will contain all users, but if you enabled row owners on that sheet, users will only be able to see/access their own profile information.

---

<div class="post-metadata">

**Author:** ![Eric\_Penn](https://sea2.discourse-cdn.com/flex002/user_avatar/community.glideapps.com/eric_penn/32/73888_2.png) [@Eric\_Penn](https://community.glideapps.com/u/Eric_Penn)\
**Post date:** [January 15, 2021, 8:48pm UTC](https://community.glideapps.com/t/help-with-security-issue-in-user-profiles/21223/5 "2021-01-15T20:48:04Z")

</div>

Are there many professionals to speak of? Will the amount of professionals increase over time?

---

<div class="post-metadata">

**Author:** ![Micheline\_K](https://sea2.discourse-cdn.com/flex002/user_avatar/community.glideapps.com/micheline_k/32/18864_2.png) [@Micheline\_K](https://community.glideapps.com/u/Micheline_K)\
**Post date:** [January 15, 2021, 8:52pm UTC](https://community.glideapps.com/t/help-with-security-issue-in-user-profiles/21223/6 "2021-01-15T20:52:27Z")

</div>

Yes, ideally it would grow over time.

---

<div class="post-metadata">

**Author:** ![Eric\_Penn](https://sea2.discourse-cdn.com/flex002/user_avatar/community.glideapps.com/eric_penn/32/73888_2.png) [@Eric\_Penn](https://community.glideapps.com/u/Eric_Penn)\
**Post date:** [January 15, 2021, 9:00pm UTC](https://community.glideapps.com/t/help-with-security-issue-in-user-profiles/21223/7 "2021-01-15T21:00:55Z")

</div>

There are some ideas thrown around in this thread regarding dynamically changing columns for the use of row owners.

> [@Row Owners via Dynamic Array](https://community.glideapps.com/t/row-owners-via-dynamic-array/16600/12):
>
> Here you are. The formula inputs new column names in an array style when new values are added that increases the max number of columns required.

Roles would naturally be an easier solution but I don’t believe they work for Public w/ email.

---

<div class="post-metadata">

**Author:** ![Micheline\_K](https://sea2.discourse-cdn.com/flex002/user_avatar/community.glideapps.com/micheline_k/32/18864_2.png) [@Micheline\_K](https://community.glideapps.com/u/Micheline_K)\
**Post date:** [January 15, 2021, 10:15pm UTC](https://community.glideapps.com/t/help-with-security-issue-in-user-profiles/21223/8 "2021-01-15T22:15:22Z")

</div>

Thanks! I’ll take a look.

Yeah, roles are unfortunately only for private apps.
