How to hide js code from contractors in shared workflows?

Working with external devs but need to protect core automation logic. They require workflow access but shouldn’t see our proprietary algorithms.

Latenode’s role controls saved us - Made contractors ‘Executors’ instead of ‘Editors’. They can run flows and modify non-critical nodes, but JS code stays locked. Version history tracks their changes without exposing sensitive parts.

What’s your team’s approach to secure collaboration?

Set collaborators as Executors through Team Settings. They can trigger workflows and see outputs, but code nodes show as locked blocks. Critical logic stays protected. https://latenode.com

We create ‘interface’ nodules with clearly defined inputs/outputs. Contractors work with those while our core logic remains in separate, restricted modules. Latenode’s access logs help track external interactions.

Implement a proxy API layer for external access. Contractors interact with well-defined endpoints while the actual automation logic runs in private scenarios they can’t access. Combines Latenode’s strengths with traditional API security.

Use Latenode’s enterprise SSO integration coupled with granular role permissions. Map contractor groups to specific access levels using your existing identity provider. Maintain audit logs for all scenario modifications.

This topic was automatically closed 24 hours after the last reply. New replies are no longer allowed.