jegelstaff / formulize

Unified data management. One system to handle all data entry, collection, and reporting, across all your unique workflows. Simplify processes. Make people happy.
https://www.formulize.org
GNU General Public License v2.0
27 stars 14 forks source link

Anon passcodes should only be used as filters in a form, if set via permissions #511

Open jegelstaff opened 3 months ago

jegelstaff commented 3 months ago

Need a new permissions setting, to control whether anons have access to entries restricted by their passcodes or not. Awareness of this needs to be built into the passcode filtering in gather data (extract.php, setting fundamental filters in the parse filters function) and also in the security check function (functions.php).

This is important because you might want anons to require a passcode to access a screen, but once on the screen you don't want the data filtered. Kind of nasty side effects if you have filters active in such a situation, all data goes away potentially (if non has passcode added)