# Setting up roles

**URL:** <https://community.dreamfactory.com/t/setting-up-roles/3924>\
**Category:** uncategorized\
**Created:** [June 29, 2017, 11:51am UTC](https://community.dreamfactory.com/t/setting-up-roles/3924 "2017-06-29T11:51:25Z")\
**Posts on this page:** 1\
**Page:** 1

<div class="post-metadata">

**Author:** ![teksuser](https://avatars.discourse-cdn.com/v4/letter/t/4da419/32.png) [@teksuser](https://community.dreamfactory.com/u/teksuser)\
**Post date:** [June 29, 2017, 11:51am UTC](https://community.dreamfactory.com/t/setting-up-roles/3924/1 "2017-06-29T11:51:25Z")

</div>

I wanted to know whether can we set restricted fields access while setting up role in DreamFactory?  
e.g. If “app\_user” role should not have access to the password field in “appuser” table.

I know one way like restricting response as mentioned here  
[Limit API responses based on user or role](https://community.dreamfactory.com/t/limit-api-responses-based-on-user-or-role/693/2).

But is there any other new approach to do this?