# "Run As" Feature - Security Concern

**URL:** <https://forum.bubble.io/t/run-as-feature-security-concern/26806>\
**Category:** Idea\
**Created:** [March 30, 2018, 6:22pm UTC](https://forum.bubble.io/t/run-as-feature-security-concern/26806 "2018-03-30T18:22:47Z")\
**Posts on this page:** 4\
**Page:** 1

<div class="post-metadata">

**Author:** ![andersan](https://sea1.discourse-cdn.com/bubble/user_avatar/forum.bubble.io/andersan/32/17330_2.png) [@andersan](https://forum.bubble.io/u/andersan)\
**Post date:** [March 30, 2018, 6:22pm UTC](https://forum.bubble.io/t/run-as-feature-security-concern/26806/1 "2018-03-30T18:22:47Z")

</div>

When using the [“Run As” a specfic user feature](http://forum.bubble.io/t/new-feature-running-an-app-as-a-given-user/5039), I’ve noticed that in the server logs there is no way to trace whether the person using the “Run As” feature is actually that user.

Does anyone else think it is necessary to add a field in the server logs or somehow show that this user is being impersonated by a Bubble user?

---

<div class="post-metadata">

**Author:** ![JonL](https://avatars.discourse-cdn.com/v4/letter/j/e5b9ba/32.png) [@JonL](https://forum.bubble.io/u/JonL)\
**Post date:** [March 30, 2018, 7:41pm UTC](https://forum.bubble.io/t/run-as-feature-security-concern/26806/2 "2018-03-30T19:41:49Z")

</div>

Actually I believe that “Run as” should be limited to test environment.

---

<div class="post-metadata">

**Author:** ![andersan](https://sea1.discourse-cdn.com/bubble/user_avatar/forum.bubble.io/andersan/32/17330_2.png) [@andersan](https://forum.bubble.io/u/andersan)\
**Post date:** [March 30, 2018, 8:47pm UTC](https://forum.bubble.io/t/run-as-feature-security-concern/26806/3 "2018-03-30T20:47:05Z")

</div>

That sounds like a good solution for this issue. Not sure if this feature is heavily used by anyone’s team to provide support to users, though.

---

<div class="post-metadata">

**Author:** ![emmanuel](https://sea1.discourse-cdn.com/bubble/user_avatar/forum.bubble.io/emmanuel/32/27657_2.png) [@emmanuel](https://forum.bubble.io/u/emmanuel)\
**Post date:** [March 30, 2018, 8:48pm UTC](https://forum.bubble.io/t/run-as-feature-security-concern/26806/4 "2018-03-30T20:48:43Z")

</div>

This feature is accessible only to users with database rights on the application, so it doesn’t show anyone things they cannot see in the editor via the data tab.