# Security info about Hidden tab

**URL:** <https://community.glideapps.com/t/security-info-about-hidden-tab/17726>\
**Category:** Ask for Help\
**Created:** [October 29, 2020, 10:56am UTC](https://community.glideapps.com/t/security-info-about-hidden-tab/17726 "2020-10-29T10:56:04Z")\
**Posts on this page:** 17\
**Page:** 1

<div class="post-metadata">

**Author:** ![Antonino\_Nolasco](https://sea2.discourse-cdn.com/flex002/user_avatar/community.glideapps.com/antonino_nolasco/32/80601_2.png) [@Antonino\_Nolasco](https://community.glideapps.com/u/Antonino_Nolasco)\
**Post date:** [October 29, 2020, 10:56am UTC](https://community.glideapps.com/t/security-info-about-hidden-tab/17726/1 "2020-10-29T10:56:04Z")

</div>

Hi, today I receveid an email from glide about securety, I read: **“Do not rely on visibility settings, hidden tabs, and hidden components to protect private information.”**

I use once app for manage my company, I have my tabs and my employees has their tabs working with visibility settings. Do i have to worry about my private data?

Thanks, Toni

---

<div class="post-metadata">

**Author:** ![kyleheney](https://sea2.discourse-cdn.com/flex002/user_avatar/community.glideapps.com/kyleheney/32/41173_2.png) [@kyleheney](https://community.glideapps.com/u/kyleheney)\
**Post date:** [October 29, 2020, 11:04am UTC](https://community.glideapps.com/t/security-info-about-hidden-tab/17726/2 "2020-10-29T11:04:01Z")

</div>

Does your app limit access by email?

---

<div class="post-metadata">

**Author:** ![Antonino\_Nolasco](https://sea2.discourse-cdn.com/flex002/user_avatar/community.glideapps.com/antonino_nolasco/32/80601_2.png) [@Antonino\_Nolasco](https://community.glideapps.com/u/Antonino_Nolasco)\
**Post date:** [October 29, 2020, 11:07am UTC](https://community.glideapps.com/t/security-info-about-hidden-tab/17726/3 "2020-10-29T11:07:28Z")

</div>

Yes, it does. But my fear is my emplyees can see personal data that only I can see.  
@kyleheney

---

<div class="post-metadata">

**Author:** ![kyleheney](https://sea2.discourse-cdn.com/flex002/user_avatar/community.glideapps.com/kyleheney/32/41173_2.png) [@kyleheney](https://community.glideapps.com/u/kyleheney)\
**Post date:** [October 29, 2020, 11:09am UTC](https://community.glideapps.com/t/security-info-about-hidden-tab/17726/4 "2020-10-29T11:09:18Z")

</div>

If you’re not using anything beyond “Limit Access by Email” , then my understanding is that anyone who can sign in can access (in some way) all users’ information.

You’re best to use Row Owners, Roles, and/or Protected columns to further prevent access to data in the back-end.

---

<div class="post-metadata">

**Author:** ![Antonino\_Nolasco](https://sea2.discourse-cdn.com/flex002/user_avatar/community.glideapps.com/antonino_nolasco/32/80601_2.png) [@Antonino\_Nolasco](https://community.glideapps.com/u/Antonino_Nolasco)\
**Post date:** [October 29, 2020, 11:11am UTC](https://community.glideapps.com/t/security-info-about-hidden-tab/17726/5 "2020-10-29T11:11:16Z")

</div>

I’m using role for each user, I can see my tabs by visibility settings and my employees can see only tabs and data that I want.

---

<div class="post-metadata">

**Author:** ![kyleheney](https://sea2.discourse-cdn.com/flex002/user_avatar/community.glideapps.com/kyleheney/32/41173_2.png) [@kyleheney](https://community.glideapps.com/u/kyleheney)\
**Post date:** [October 29, 2020, 11:12am UTC](https://community.glideapps.com/t/security-info-about-hidden-tab/17726/6 "2020-10-29T11:12:41Z")

</div>

I think that sounds okay. One thing to note: anyone with the same role can access anyone else’s information with the same role (I think).

---

<div class="post-metadata">

**Author:** ![Antonino\_Nolasco](https://sea2.discourse-cdn.com/flex002/user_avatar/community.glideapps.com/antonino_nolasco/32/80601_2.png) [@Antonino\_Nolasco](https://community.glideapps.com/u/Antonino_Nolasco)\
**Post date:** [October 29, 2020, 11:17am UTC](https://community.glideapps.com/t/security-info-about-hidden-tab/17726/7 "2020-10-29T11:17:34Z")

</div>

Yes, but they can see only personal record by filter “Email is signed-in user”.

---

<div class="post-metadata">

**Author:** ![kyleheney](https://sea2.discourse-cdn.com/flex002/user_avatar/community.glideapps.com/kyleheney/32/41173_2.png) [@kyleheney](https://community.glideapps.com/u/kyleheney)\
**Post date:** [October 29, 2020, 11:22am UTC](https://community.glideapps.com/t/security-info-about-hidden-tab/17726/8 "2020-10-29T11:22:05Z")

</div>

They can only “see” , yes… But they can “access” other users’ info who hold the same Role by using browser inspecting — it involves some know-how but it’s possible.

The best thing to do is to also use Row Owners to ensure that only that user can access that row of data.

---

<div class="post-metadata">

**Author:** ![Antonino\_Nolasco](https://sea2.discourse-cdn.com/flex002/user_avatar/community.glideapps.com/antonino_nolasco/32/80601_2.png) [@Antonino\_Nolasco](https://community.glideapps.com/u/Antonino_Nolasco)\
**Post date:** [October 29, 2020, 11:24am UTC](https://community.glideapps.com/t/security-info-about-hidden-tab/17726/9 "2020-10-29T11:24:33Z")

</div>

But with row owners I can’t see their data. I’m the admin.

---

<div class="post-metadata">

**Author:** ![kyleheney](https://sea2.discourse-cdn.com/flex002/user_avatar/community.glideapps.com/kyleheney/32/41173_2.png) [@kyleheney](https://community.glideapps.com/u/kyleheney)\
**Post date:** [October 29, 2020, 11:25am UTC](https://community.glideapps.com/t/security-info-about-hidden-tab/17726/10 "2020-10-29T11:25:26Z")

</div>

You’ll have to create a copy of the sheet and set up a different row owner that would apply to all rows. That row owner would be the admin only and they would have access to every row of that copied sheet.

---

<div class="post-metadata">

**Author:** ![Antonino\_Nolasco](https://sea2.discourse-cdn.com/flex002/user_avatar/community.glideapps.com/antonino_nolasco/32/80601_2.png) [@Antonino\_Nolasco](https://community.glideapps.com/u/Antonino_Nolasco)\
**Post date:** [October 29, 2020, 11:30am UTC](https://community.glideapps.com/t/security-info-about-hidden-tab/17726/11 "2020-10-29T11:30:59Z")

</div>

Ah ok, I got it. Just use arrayformula in the sheet copy that take the values that I want they see from original sheet. Thank you.

---

<div class="post-metadata">

**Author:** ![Jeff\_Hager](https://sea2.discourse-cdn.com/flex002/user_avatar/community.glideapps.com/jeff_hager/32/43_2.png) [@Jeff\_Hager](https://community.glideapps.com/u/Jeff_Hager)\
**Post date:** [October 29, 2020, 11:41am UTC](https://community.glideapps.com/t/security-info-about-hidden-tab/17726/12 "2020-10-29T11:41:57Z")

</div>

I don’t think you need to copy the sheet. If I understand correctly, you should be able to mix roles and emails. So if you set up an array column (Email 1, Email 2), then can have the user’s email in the first column and the ‘Admin’ role in the second column and you can set row owners based on the array column I believe.

---

<div class="post-metadata">

**Author:** ![Antonino\_Nolasco](https://sea2.discourse-cdn.com/flex002/user_avatar/community.glideapps.com/antonino_nolasco/32/80601_2.png) [@Antonino\_Nolasco](https://community.glideapps.com/u/Antonino_Nolasco)\
**Post date:** [October 29, 2020, 11:52am UTC](https://community.glideapps.com/t/security-info-about-hidden-tab/17726/13 "2020-10-29T11:52:35Z")

</div>

I want to show only some fields of a record. For example, I have a row with the fields: Project - Customer - Cost, and of that line I only want my employees to see only the Project - Customer fields, the Cost field can only be seen by me who am the admin.

---

<div class="post-metadata">

**Author:** ![kyleheney](https://sea2.discourse-cdn.com/flex002/user_avatar/community.glideapps.com/kyleheney/32/41173_2.png) [@kyleheney](https://community.glideapps.com/u/kyleheney)\
**Post date:** [October 29, 2020, 11:53am UTC](https://community.glideapps.com/t/security-info-about-hidden-tab/17726/14 "2020-10-29T11:53:57Z")

</div>

Ah yes that’s right.

The one thing I like about using copied sheets is that the admin view can be built completely separately and can use a different layout entirely than the main/employee view.

---

<div class="post-metadata">

**Author:** ![Antonino\_Nolasco](https://sea2.discourse-cdn.com/flex002/user_avatar/community.glideapps.com/antonino_nolasco/32/80601_2.png) [@Antonino\_Nolasco](https://community.glideapps.com/u/Antonino_Nolasco)\
**Post date:** [October 29, 2020, 11:58am UTC](https://community.glideapps.com/t/security-info-about-hidden-tab/17726/15 "2020-10-29T11:58:31Z")

</div>

If I set up the array column, both Email 1 and Email2 can see the entire record. I want hide from all my projects the fields that I want and make visible only that I want. Naturally using only one app. This is why I created more separated tabs for each role

---

<div class="post-metadata">

**Author:** ![Jeff\_Hager](https://sea2.discourse-cdn.com/flex002/user_avatar/community.glideapps.com/jeff_hager/32/43_2.png) [@Jeff\_Hager](https://community.glideapps.com/u/Jeff_Hager)\
**Post date:** [October 29, 2020, 12:23pm UTC](https://community.glideapps.com/t/security-info-about-hidden-tab/17726/16 "2020-10-29T12:23:31Z")

</div>

Understood. If you would rather have duplicated sheets, that’s fine. You could set visibility of components based on role, but if security is a primary concern and your employees should not have any ability to access cost, for example, then duplicate sheet data is better.

---

<div class="post-metadata">

**Author:** ![NoCodeAndy](https://sea2.discourse-cdn.com/flex002/user_avatar/community.glideapps.com/nocodeandy/32/62530_2.png) [@NoCodeAndy](https://community.glideapps.com/u/NoCodeAndy)\
**Post date:** [January 12, 2024, 2:03am UTC](https://community.glideapps.com/t/security-info-about-hidden-tab/17726/17 "2024-01-12T02:03:38Z")

</div>


