# Session-based invite codes for users without sign-in

**URL:** <https://community.glideapps.com/t/session-based-invite-codes-for-users-without-sign-in/77592>\
**Category:** Ask for Help\
**Created:** [November 4, 2024, 2:20am UTC](https://community.glideapps.com/t/session-based-invite-codes-for-users-without-sign-in/77592 "2024-11-04T02:20:29Z")\
**Posts on this page:** 1\
**Showing post:** 5

<div class="post-metadata">

**Author:** ![aspiers](https://sea2.discourse-cdn.com/flex002/user_avatar/community.glideapps.com/aspiers/32/81524_2.png) [@aspiers](https://community.glideapps.com/u/aspiers)\
**Post date:** [November 5, 2024, 4:04pm UTC](https://community.glideapps.com/t/session-based-invite-codes-for-users-without-sign-in/77592/5 "2024-11-05T16:04:04Z")

</div>

Also I have concerns about the security of this. Don’t I need row owners to be set on the `Invites` table containing all the invite codes? This old post below seems to suggest that without Row Owners enabled, all the invite codes will be downloaded to the end user’s device before the check is done? Or are you saying that I only need the `Guests` table to not use Row Owners, but it’s OK for the `Invites` table to use it?

Essentially I need the `Invites` table to be unreadable to users who aren’t logged in, whilst still being able to cross-check the validity of a particular invite code provided by a guest against the list of valid codes. This means the check needs to be done server-side, but I’m not sure if that can happen when using USC values?

> [@User specific column values are visible to all](https://community.glideapps.com/t/user-specific-column-values-are-visible-to-all/20207/17):
>
> @gblitzer - there is one thing you need to be aware of. And that is whilst it will be possible to “hide” records from users, it will not be possible (AFAIK) to come up with a solution that is truly secure unless you have User Profiles & Row Owners enabled. Why? Because without Row Owners, all data will be downloaded to an end users device, and then any filtering/visibility shenanigans designed to “hide” data takes place on their device. Whilst this might be good enough for the casual user, it w…

---

_[View the full topic](https://community.glideapps.com/t/session-based-invite-codes-for-users-without-sign-in/77592)._
