Correct setup for anonymously created, but editable items

Help
,
1

Hi there :waving_hand:

I am currently building a feedback system for our directus based website.

The general idea is that users will be able to leave +1/-1 feedback without having to be logged in. Hence this collection is publicly writeable.

However, I do want them to be able to edit the item after creation. For context: There will be a popup that says “Thank you for your input, would you like to leave an acoompanying comment?“ and if so that comment will be stored on the same item as the +1/-1 vote.

What is the best way to make an item editable publicly, but functionaly only for its (anonymous) creator?

I though about creating a random token field during creation of the item that can work as an auth token - but I cannot seem to setup the access policy correctly.

Any suggestions?

2

Hi Jan,

What tech stack are you using for your frontend? I speak to lots of people using next / nuxt type frontends and you can leverage their server functions to handle writing content back to your Directus project instead of them connecting directly back to your Directus API.

This way, when a user provides the up / down vote, you could generate a cookie that associates that upvote with that specific user.