CiviCRM Community Forums (archive)

In the latest Webform for CiviCRM, there's the option (in Additional Options) to block unknown users. The words are "Only allow users to see this form if they are logged in or following a personalized link from CiviMail"   I have made a webform for unknown users to add contacts, and that works OK (they get blocked) when anonymous users access the site directly.  But when I try the second option of adding the link to an email from CiviMail, they get blocked as well!  The link I put in the email looks something like http://www.mysite.org.uk/node/1 so I don't see how this is any different from the direct link.  I guess I have misunderstood something?  Maybe the above wording is the problem?

Thanks - so if you're using webform to allow anonymous users to add contacts then this restriction doesn't really apply then, does it?  'Cos I can't put a link like you describe in as the contacts are going to be new...

I will try to explain the use case.  I want some anonymous users (social workers mostly) to be able to add some contacts (actually, children who are being signed up for Xmas presents  )  There are a lot of children (600+) so we want to outsource the work!  But it would be good if the social workers could only do this via a link in an email, and not in any other way as this seems rather insecure.

I set this up in the webform as you described, and capturing the relationship between the social worker and the child works well.   I also created an activity for the social  worker which gives a nice audit trail.  Really good!  But, as ever, there some problems I've not been able to solve though.
1. The contact records for the children created in Civi show the source (which is nice), but the Change Log shows the contact as having been updated/created by the child (i.e. Jane Doe has been created by Jane Doe, who might only be 3 years old!).  Is there a way of having the social worker (i.e. Contact 1 in the webform) as the initial entry in the Change Log?  The social worker will be a known contact, of course.
2. As the information for each child is quite brief, I put 4 children on each webform page.  Problem is some fields are set as 'required', and if only 2 children are to be completed, the user is told to fill in the other 2 even though they should be left blank.  Can the conditional processing in a webform deal with this?

1) Sorry, I wasn't clear.  The new contact records that the social worker creates with the webform all get a Change Log with the child name on it, rather than the social worker which it should be, really.  I'm on 4.4.3 using latest modules.
2) Shame on me!  I was at CiviCon 2013 & enjoyed your presentation but obviously wasn't concentrating.  You must have made too many jokes or something..

1) In my case, contact 1 is a known contact but anonymous (in Civi but not a registered Drupal user).  I then get a change log saying that the child was first entered by the child.  Would changing a permission in Drupal fix this?  But that would be a security risk...

Can you test this patch?

I changed it a bit more and pushed it in so you can just checkout the project from git to try it, or else wait for the -dev version to update on d.o.