Ray Deck
Ray Deck
Xano Expert
 · Lead Mentor @ statechange.ai

Environment Variables and Protecting Exposure to Limited Access Developers?

Hello All, did some searchign but not finding this specific use case:

Is there a way to restrict access to environment variables so that a function can not expose them, but still be used in the API?

If I rely on RBAC (Enterprise) to manage team members, they can still see envirnment variables which is a problem in our use case.

Are there any recommendations, best practices I can employ to enhance our security in this regard?

4 replies