Correct setup for anonymously created, but editable items

Help
,
1

Hi there :waving_hand:

I am currently building a feedback system for our directus based website.

The general idea is that users will be able to leave +1/-1 feedback without having to be logged in. Hence this collection is publicly writeable.

However, I do want them to be able to edit the item after creation. For context: There will be a popup that says “Thank you for your input, would you like to leave an acoompanying comment?“ and if so that comment will be stored on the same item as the +1/-1 vote.

What is the best way to make an item editable publicly, but functionaly only for its (anonymous) creator?

I though about creating a random token field during creation of the item that can work as an auth token - but I cannot seem to setup the access policy correctly.

Any suggestions?

1 Answer

1
2

Hi Jan,

What tech stack are you using for your frontend? I speak to lots of people using next / nuxt type frontends and you can leverage their server functions to handle writing content back to your Directus project instead of them connecting directly back to your Directus API.

This way, when a user provides the up / down vote, you could generate a cookie that associates that upvote with that specific user.

We are indeed using Nuxt. We don't have any users though (besides admins obv.) - that's the whole point of this feature - the creation (and limited updating) should work publicly. (And to clarify: The nuxt frontend, also has no special user access - it basically just uses the API as a public user)

 –

In the meantime another usecase has come up. For an event we're planning, we would like to have a CfP form on the website. Visitors who submit a talk, should receive an e-mail with a token/link that allows them to edit their submission after the fact. Any tipps on how to tackle this?

 –