Dashboards can be deleted by unauthenticated users

[john66public]

C8 2.3.8.128
anyone that knows the local lan link to a dashboard can modify or delete without any authentication. this leaves the hubitat UI exposed to anyone on the network.

I understand that only trusted users would know the link but trusted users are not always intelligent users and can unknowingly modify or delete things.

I would like to see the ability to modify or delete tiles removed from the local lan link functionality. only authenticated users with the correct permissions should be able to modify or delete things.

[bertabcd1234]

Can you be more specific? It seems like you might be talking about two different things.

@john66public

I would like to see the ability to modify or delete tiles removed from the local lan link functionality.

This option is already available (though it's not LAN-specific) in any Dashboard:

If you are also talking about access to the hub admin UI, that isn't really Dashboard-specific but can be controlled by enabling this feature:

https://docs2.hubitat.com/en/user-interface/settings/hub-login-security

Or is there something else?

[john66public]

ill try the lock down dashboard settings to see if it accomplishes what i need. I already use the hub login security.

thanks

[marktheknife]

@john66public

ill try the lock down dashboard settings to see if it accomplishes what i need.

If your goal is to prevent users from editing a dashboard (intentionally or unintentionally), then that is precisely what the feature @bertabcd1234 referenced is intended to do.

You might also want to toggle off the switch that says “allow logo click to go back to dashboard menu.” This will prevent the user from accessing another dashboard that you didn’t intend for them to have access to.

The documentation for dashboards is here, if you need to review the available features.