Session-based invite codes for users without sign-in

[aspiers]

@Jeff_Hager

I’d be more inclined to think it’s a problem with the tab you are trying to go to. Is the tab you are going to still active? How are you hiding the tab from the user?

Ahah! You are right, the destination tab was only visible for logged in users which specified a valid invite code, because that’s the only way I could get it working previously.

However, I’m trying to change it to depend on whether the single visible row in the Guests table has a valid invite code, but it only lets me create tab visibility conditions based on the User Profile, which is of course blank because the guest isn’t signed in:

Why won’t it let me set a condition based on the data in the table which is the data source for the tab?

@Jeff_Hager

@aspiers

I have concerns about the security of this

As you should. The only guaranteed way to enforce data security is to require users to sign in and apply row owners. Otherwise in your case, someone with enough knowledge could snoop the data that is downloaded to the device and find the list of invite codes, or even snoop the survey results.

You can make it harder by enabling unused invite codes for a short period of time and deactivate then once used, which would make it harder for someone to do anything with them, but it’s not foolproof.

The invite codes column is currently a computed value. Sniffing the network traffic in the browser console, I see the non-computed values included in one of the responses, but I don’t see computed values. Are these values computed server-side or client-side, and similarly where is the matching of relation fields done? If both are done server-side, maybe I could generate invite codes from, say, the rowId and a secret key which is only accessible server-side?

@Jeff_Hager

Plus there is still the fact that all survey results could be floating out there too.

Right

@Jeff_Hager

You could change your process to have all your survey answers written to user specific columns, and then have a final submit button that writes all of the answers to another table with row owners applied and the row owner email set to an admin email. Users would not have access to any submitted survey results because of row owners, but could still submit the survey without signing in.

That’s an interesting idea. But if I can’t secure the invite codes properly then it’s already questionable whether this approach is viable.

Thanks a lot for the great help so far!