grist-core
grist-core copied to clipboard
Improve form sharing security
Describe the problem to be solved
Problem
Grist's form creation is a great feature, but only being able to share anonymous form links could be security and observability issues.
- Access Control : No option to limit form access to specific user groups or authenticated users.
- User Tracking : Inability to track who submitted form responses.
Risks
- Confidentiality : Forms are accessible to anyone with the link, restricting the type of information that can be shared due to potential confidentiality leaks.
- Denial of Service : Publicly available forms could be vulnerable to DoS attacks; an attacker could flood with responses, causing database to grow.
Describe the solution you would like
Proposed Solutions
- Introduce the option of access control through authentication to the platform when sharing a link. To limit form access to specific users or at least authenticated ones.