# Embedded database CORS policy \[Feb 16\]

**URL:** <https://community.nocodb.com/t/embedded-database-cors-policy-feb-16/211>\
**Category:** Discord-Discussions\
**Created:** [November 3, 2022, 8:02am UTC](https://community.nocodb.com/t/embedded-database-cors-policy-feb-16/211 "2022-11-03T08:02:54Z")\
**Posts on this page:** 5\
**Page:** 1

<div class="post-metadata">

**Author:** ![NocoDB](https://avatars.discourse-cdn.com/v4/letter/n/6f9a4e/32.png) [@NocoDB](https://community.nocodb.com/u/NocoDB)\
**Post date:** [November 3, 2022, 8:02am UTC](https://community.nocodb.com/t/embedded-database-cors-policy-feb-16/211/1 "2022-11-03T08:02:54Z")

</div>

> 🙋‍♂️ **wisethrall** _asked_

## Hi all

#### I was wondering what steps I can take to secure access to the embedded nocodb iframe?

#### Because as it is right now, anyone with the link can edit the data (if enabled).

#### Can I use CORS policies for this?

---

<div class="post-metadata">

**Author:** ![NocoDB](https://avatars.discourse-cdn.com/v4/letter/n/6f9a4e/32.png) [@NocoDB](https://community.nocodb.com/u/NocoDB)\
**Post date:** [November 3, 2022, 8:02am UTC](https://community.nocodb.com/t/embedded-database-cors-policy-feb-16/211/2 "2022-11-03T08:02:55Z")

</div>

> 💁 **o1lab** _replied_

#### CORS policy setting is not available for embedded database. Could you please raise a feature request with all the details.

#

---

<div class="post-metadata">

**Author:** ![NocoDB](https://avatars.discourse-cdn.com/v4/letter/n/6f9a4e/32.png) [@NocoDB](https://community.nocodb.com/u/NocoDB)\
**Post date:** [November 3, 2022, 8:02am UTC](https://community.nocodb.com/t/embedded-database-cors-policy-feb-16/211/3 "2022-11-03T08:02:56Z")

</div>

> 🙋‍♂️ **wisethrall** _replied_

#### Password protection would also be an option, will create a feature request

#

---

<div class="post-metadata">

**Author:** ![NocoDB](https://avatars.discourse-cdn.com/v4/letter/n/6f9a4e/32.png) [@NocoDB](https://community.nocodb.com/u/NocoDB)\
**Post date:** [November 3, 2022, 8:02am UTC](https://community.nocodb.com/t/embedded-database-cors-policy-feb-16/211/4 "2022-11-03T08:02:57Z")

</div>

> 💁 **o1lab** _replied_

#### sure

#

---

<div class="post-metadata">

**Author:** ![NocoDB](https://avatars.discourse-cdn.com/v4/letter/n/6f9a4e/32.png) [@NocoDB](https://community.nocodb.com/u/NocoDB)\
**Post date:** [November 3, 2022, 8:02am UTC](https://community.nocodb.com/t/embedded-database-cors-policy-feb-16/211/5 "2022-11-03T08:02:59Z")

</div>

[Autogenerated from discord](https://discord.com/channels/661905455894888490/943078331732066364)

* * *

#### Join [NocoDB’s](http://www.nocodb.com/) community

[Discord](https://discord.gg/5RgZmkW) • [Twitter](https://twitter.com/nocodb) • [Reddit](https://www.reddit.com/r/NocoDB/) • [Docs](https://docs.nocodb.com/)