Form Access Modes


Most forms created in ActiveForms are available to the public on the Internet and are expected to collect as many entries as possible.
There are, however, situations when your form should not be public but available to selected users only. To make that possible, ActiveForms supports 3 access modes for entries:

  • Public – a public mode where an entry is freely accessible;
  • Only authorized by secret key – a mode with pseudo-authorisation where an entry is only available to people who know a key which is supposed to be secret;
  • Only through third-party applications – a mode with full authorisation, where a form is only available after authorisation.

Not surprisingly, the Public mode is used for forms freely accessible on the Internet, and available at https://activeforms.com/customer/form.

The Only authorized by secret key mode allows hiding forms from unauthorised viewers to an extent. Such forms are available at https://activeforms.com/customer/form?auth=bbszM6MgIgZ, where the auth parameter contains an authentication code that is difficult to forge.

Note that if the auth code is lost, the form would be as freely accessible as a public one. This mode is useful for example when you have created a new form and want to show to selected people for testing, but you don’t want it to be visited by strangers.

The Only through third-party applications mode makes your form available at https://activeforms.com/customer/form?auth=bbszM6MgIgZ, but the auth parameter should contain one-time access codes. One-time password lists can be downloaded via the ActiveForms API. This means that you can only use this mode with a supporting application (e.g. of a workflow type) which integrates with ActiveForms and generates links to forms with one-time passwords.

This feature enables us to keep strangers away from our private forms, for example ones that contain confidential information or are integrated with our internal systems.

Keep in mind that a one-time password is invalidated while attempting to enter a form (and not to submit an entry, for example). Consequently, whenever someone opens the form page, the one-time password is already used and a new one is necessary to generate a link.

Forms shared in the Only through third-party applications mode can also be accessed using a link to a saved entry (with an Incomplete status)—the same link as with the regular Save & Load function.

recent posts
3rd Apr 2014
Faster than ever!
5th Dec 2013
Live validation!
2nd Dec 2013
Features distilled
12th Mar 2012
Flicking Channels
26th Jan 2012
Your Own Error Page
9th May 2011
Box Properties
15th Apr 2011
Grouping Fields
13th Apr 2011
Form Versioning
24th Feb 2011
Form Access Modes
22nd Feb 2011
Required Fields
4th Feb 2011