Frontend editing working only when logged in.

[kater]

hi,

I'm only allowed to front-edit (Method D, modal comes up) when I'm logged in.
Default guest user (role ID 37) without login will not work while a logged in user with role 37 assigned will work (and superuser ofc).
Does frontend editing require a 'real' login?

All template access rules are assigned and checked.

Any hints what i might be missing?

thanks

ProcessWire 3.0.108

[louisstephens]

I believe you have to have a login with a role with proper permissions other than guest to be able to edit content. As far as I understand, the guest role does not have page edit permissions (unless you have changed this).

[kater]

thanks for your reply!

guest has full edit permissions.
theres seems to be a difference between assumed guest role (visitor) and logged in guest role.

[bernhard]

May I ask WHY you want to allow a not-logged-in guest user to edit your pages? ?

[kater]

sure.

it's an event registration site where people with an ticket id (which they enter once) can confirm their status and choose a couple details.
 

not more ?

[bernhard]

so maybe you could just log them in after they entered the correct ticket id?

[kater]

i thought about that but after sending the invitation there may be hundreds trying to log in at the same time.

 

[dragan]

I wouldn't worry about that.

Seriously, such a setup is potentially very dangerous. It's against everything PW stands for: Security first.

[wbmnfktr]

There are two things coming up my mind to get this done:

1. FormBuilder + some hooks for checking and saving responses
2. something similar like the Social Impact Award tool @bernhard built in the past

[bernhard]

1 hour ago, kater said:

it's an event registration site where people with an ticket id (which they enter once) can confirm their status and choose a couple details.

So are you trying to use FrontendEditing as some kind of form-replacement?

Don't know if there are any limitations in the number of currently logged in users or any performance issues...

[kater]

Just curious. How would permission to edit a set of pages even without login compromise the security of the remaining site?

Yes, all doable via forms. The frontedit modal dialog is just a very comfortable and flexible way. ?

thanks!
 

[wbmnfktr]

2 hours ago, kater said:

Just curious. How would permission to edit a set of pages even without login compromise the security of the remaining site?

This question is kind of a joke, right?

 

2 hours ago, kater said:

The frontedit modal dialog is just a very comfortable and flexible way.

True! But its purpose is editing page content for logged-in users (editors with knowledge about the system and the process) and not taking event registrations from people that don't know what they do there.