surveys

Nikki Valentine Odens

Somehow when I was playing with a survey I came across url http://stjo.org/site/Survey with no survey id number, but it gets me to a list of all our surveys. Which isn't good, since I wouldn't want someone on the front side with access to certain surveys. Any suggestions, or is this a fluke??

Brian Mucha

I didn't know about that survey summary page. Neat.

As for your access issue, if there are survey's (or any other content) that someone on the front side shouldn't see then you should have that content protected with a security class that Site Visitors (and anyone else not in a group with access) can't see.

Otherwise you are relying on 'security by obscurity' which isn't security at all. Your 'secret' content could well get indexed by Google or passed around by users.

I did a post a bit back on how to set this up. (  http://community.customer.convio.com/message/10283#10283 )

Regards, Brian

Nikki Valentine Odens

Brian Mucha:

I didn't know about that survey summary page. Neat.

As for your access issue, if there are survey's (or any other content) that someone on the front side shouldn't see then you should have that content protected with a security class that Site Visitors (and anyone else not in a group with access) can't see.

Otherwise you are relying on 'security by obscurity' which isn't security at all. Your 'secret' content could well get indexed by Google or passed around by users.

I did a post a bit back on how to set this up. (  http://community.customer.convio.com/message/10283#10283 )

Regards, Brian

Thank you Brian!