Section | |||||||||||
---|---|---|---|---|---|---|---|---|---|---|---|
|
...
Anonymous Access to Public Forms/Flows in Container Managed Tenants
If you are using a tenant configured for a container security manager and you want to allow anonymous access to your forms/flows, you you must manually add "public" to the link to make forms/flows accessible to users who are not logged in. You must do this if you are using any of the url types in the Share dialog for forms and flows, using a a Space or embedding forms/flows in your website. The The public URL allows the tenant to be secured while public forms can be accessed anonymously, ex: a job application on an external website.
Here is an example of a public url used to access a form in in a container security managed tenant. The The form/flow visibility is set to public via the the Access Control feature. Anonymous users will be able to access the form as the the servlet container will ALLOW access to the frevvo.war and will ALLOW access to the frevvo.war and ' access control will ALLOW access will ALLOW access to the form. Close/open your browser or copy/paste the public url into another browser when testing.
Code Block |
---|
http://10.0.0.6:8082/frevvo/web/public/tn/ldcsm/user/nancy/app/_KOSm0eEAEeOF6Nc8pkcCvQ/formtype/_OeWt0OEAEeOF6Nc8pkcCvQ/popupform |
You will not see the public url listed in the the Share light box.
Browser Session Security
When you create a new form, by default it is marked as private. At this time the only person who can use the form via any of the form's share choices, is the person logged into this account. Once you are ready to let others use your form you can mark the form as public. Now anyone that is given the form's Url via any of the form's share choices, has access to use and submit the form.
Private vs public appear to be a binary choice. Either no one has access unless you're logged into the account or everyone has access without the need to login. Another way to make the form accessible is to leave the form locked and share it via browser session restricted access. The API can generate form Urls that are only valid for the current browser session. The form Url generated in this way (not via the Share choices) cannot be passed to anyone outside of the session as it will not work
...