Web security question. Hide view info?

HCL Domino Domino Forum
1

Web security question.

I have a survey web app that anonymous users edit and amend data. They are send a link like the following :-http://www.domain.com/db.nsf/View/documentid

They navigate about the site using views (with form formulas on them to amend form) and a docid.

here’s a valid url for a user :-

http://www.domain.com/db.nsf/View2/documentid

if they omitted the docid they would be able to see all documents in the view.:-

http://www.domain.com/db.nsf/View2/

how can i stop then seeing all docs in the view ??

I’m also looking for a doc that will tell me how to tie down my web app, any pointers appreciated.

2

Subject: Don’t use the view: http://www.domain.com/db.nsf/0/documentUNID

or to hide it even betterhttp://www.domain.com/ReplicaIDofNSF/0/documentUNID

3

Subject: web security question. Hide view info ???

I’ve found that using depositer / write only access for anonymous, works for our survey application.

Do you need them to return to the page later after posting and make additional changes?

-Joe Rose

4

Subject: web security question. Hide view info ???

One way is to provide a phoney view template form that redirects to, or looks just like, a standard “the URL is not valid” page. View templates are described in Designer Help.I posted an interesting link here in response to a previous question about web security.