Hi!
I’ve created a doc with a form and a table which is not accessible by anybody from my organization. I’ve added the published form from that doc to our shared page as an embedding. This works fine. Anybody can fill out the form and send a request to the locked doc. Now I’ve created a filtered view on the table, because I want anybody to see HIS or HER requests without any access to all the requests from other people.
I’ve added the view as sync page to my shared document and because the original locked doc is not shared I used the “Who can access this sync page?” => anybody on this doc option to enable all members to see the page. And it works, they can see the page, but the view is empty. It does not show any records.
When I change the access rights to the doc containing the data, then the data is also shown in the shared doc.
I’d prefer to not give access rights to the doc containing the data and rather choose option one.
Can anybody comment on this? Am I missing something?
I think the best option is to add a Cross-doc table in your shared page and filter it based on the logged-in user. This way, you don’t have to give direct access to anyone in the locked doc.
However, you cannot completely prevent users from seeing each other’s data, because Coda downloads the entire table data before applying the filter. With web scraping, someone could potentially access all table data.
The only truly secure approach I see is creating a separate doc for each user and setting up Cross-doc filtering specific to that user. While this method would work, it is highly impractical—especially if you have many users.
This is a pitty. I think this is a common use-case. For example you want to share taks or goals with team mates but you don’t enable them to see each others taks, goals etc. Is there a feature-request for this somewhere which I can upvote?
I have separated docs and used cross-docs sync. I have a problem with a composed colums that contains date, won’t show up in a synced docs. Do you have suggestion?
After including the page from the locked source doc to the shared doc and changing Sync page options → Who can access this sync page? to Everyone in this doc, the page is visible to all but doesn’t show any data in the table view.
It just says There are no rows in this table.
Is this a bug? - Shouldn’t it say that the data is not accessible or something?
Unfortunately, Compose columns don’t play well with cross-doc functionality. A workaround is to duplicate the data in a regular column, but that’s not ideal. Frankly, knowing this limitation, I wouldn’t have used the Compose column type in the first place.
You can use the Format() function instead to create the view you have.
