rsmith
rsmith2mo ago

Flow operator can view everything about a flow

I want to limit access for operators. I usually create a flow, then create an app on top of it in the same folder. As far as I'm aware, you have to give the operator access to the folder for the app, and the flow that the app uses, correct? So even if I put the flow in another folder, it wouldn't help... The problem with that is that the operator can go into a flow's view, read all the code and inspect all the logs of a flow execution. This is what I want to prohibit. How do I essentially just give them access to run the app UI while keeping the flow hidden? I tried archiving a flow, but that has git sync issues where wmill sync pull seems to see those flows as "deleted" - which breaks my CI/CD
1 Reply
rubenf
rubenf2mo ago
no you do not need to give access to the flow to the operator for the app to be able to run the flow the app runs with the permission of the publisher of the app, not the end-user

Did you find this page helpful?