Showing data without sign-in

[Mikaeldorval]

I’m building a CRM and would like to know best practises to build a system able to show data without users having to sign-in.

Here’s a few examples of what I’m looking for:

1. Data statuses like orders, contracts, etc.

• An email notification is sent to a customer triggered via user interaction or automation in the CRM. Customer receives email. Clicks on button in the email to see status and gets taken to a link where he can see current status and other info.

2. Giving feedback.

• Same setup with email notification but customer is taken to a page where he can choose a star rating and write a comment.

Do I need to create dynamic urls and if so how would I do that and then make sure the added data is linked to the right data in Glide? Or are there other methods?

Would like to keep everything inside glide, no third party integrations other then make and Gmail.

[MaximeBaker]

@Mikaeldorval

Do I need to create dynamic urls and if so how would I do that and then make sure the added data is linked to the right data in Glide? Or are there other methods?

You could use deep links. I can send links to you if needed. But I am concerned about the security of the application.

If you allow unsigned in user to view data, they would be able to download all the contracts and orders data…

[Mikaeldorval]

That’s why I was thinking of using urls with custom parameters to keep backend data secured. I just don’t know where to start.

[MaximeBaker]

You can’t make a secure app with Glide if you allow unsigned user to view data. Row owners is the way to prevent unauthorized download of data.

See this thread for more information:

Security tip: Managing role-based permissions in Glide apps

If you’re using Glide apps and need secure control over user permissions, be aware that Glide’s visibility conditions (like showing or hiding buttons for certain roles) are not a security feature. While these conditions are helpful for managing the app’s appearance, they do not protect actions at the backend level. Key Points to Protect Your Data Row Owners for Data Protection: Enabling “Row Owners” is effective for securing individual records (for viewing, editing, and deleting), but it does…

[MaximeBaker]

I would suggest you to allow sign-in, that way, you can limit access to contracts and order with the email of the users with row owners:)

[Mikaeldorval]

Many businesses offer secured links via emails without always requiring sign in:

• Docusign (or any other esign software)
• Food deliveries
• Moving companies
• Etc.

I have many use cases for this. Especially since a lot of customers are only one time customers and requiring them to create an account and signing in would cause unnecessary friction.

Is that possible with Glide while keeping security in mind?

[MaximeBaker]

Unfortunately, it is not possible… Sorry. But you should make a feature request!

[MaximeBaker]

Actually I have a workaround for you, but it still requires users to sign in so yeah…