Hi!
New to Glide here. I’m trying to figure out if the workflow that I need to create is even possible in Glide.
Is it possible to have a table that has Row Owners but also be able to access the data for a row in that table if the user has a specific key?
I’m trying to use the Row ID as this key. I assume the RowID is complex enough that no-one will guess it by chance, so using this for access seems safe enough.
I want to make an app that has users with accounts that can add entries about people. The users with accounts need to only be able to see the entries that they’ve created, hence the entries table has Row Owners.
Then these people (that have been added) need to access the data about them to add some more information about themselves, but only need to do this one (hence don’t need a user account). Right now I’m trying to use RowID to grant access to the form where the people can fill in their data.
I’m trying to accomplish this by creating two apps (one private another public), that link to the same database, but I’m running into the issue that since rows have owners, the anonymous users in the public app can’t access this data.
Can someone comment if there’s a way set this up or some other approach I could take?
Thanks!
1 Like
If a table has Row Owners on it, that means a user with the same Email Address or Role can access it. If a user is not an owner, them the row will not even be downloaded to their device. It will be as if the row doesn’t exist.
To use a RowID as a row owner value, then a user would need to have that RowID as a value in the Role column of the user profile.
Now if you have a separate app where users do not sign in, you can remove row owners for that table, but be mindful that means all rows of data will be downloaded to any users device that opens the app. Basically you would be throwing away any security benefits of using row owners in the first place. It’s not so much about being able to “guess” a RowID. It’s more about data being downloaded to a user device that can be snooped if they know how.
3 Likes
Thanks for the quick responses.
My situations is a bit different than public profiles.
What I’m trying to achieve is like a hash-map. The anonymous users should not be able to access all the rows in the table, but they should be able to access (and modify) a specific row if they know the key to this row. It could certainly be done with an API call to a external service that would check a database serverside and only return the result if the key matches a line in the table.
But could this be set up somehow inside Glide?
My initial assumption was that I could somehow set the RowID that is entered by the user as the Role on the User Profile, but this does not seem to work if the user is not authenticated.
I guess one option would be to make these one-time-users also authenticate themselves with email.
1 Like