Timeline for How to access PDF of a draft Webform submission for an anonymous user with a new session?
Current License: CC BY-SA 4.0
13 events
| when toggle format | what | by | license | comment | |
|---|---|---|---|---|---|
| Nov 5 at 16:07 | vote | accept | macbert | ||
| Nov 5 at 16:06 | answer | added | macbert | timeline score: 1 | |
| Oct 30 at 18:14 | comment | added | leymannx | Or maybe you use public files and rename them upon uploading with the token in the filename. | |
| Oct 30 at 18:14 | comment | added | leymannx | Maybe some access altering allowing access to that file based on the token in the URL. Maybe using media entities instead of files. Just some ideas. | |
| Oct 30 at 17:20 | comment | added | macbert | I think it could be achieved by implementing a secure-token-url-for-pdfdownload. This could be used for the non draft workflow and for the draft workflow. Will check this out. | |
| Oct 30 at 14:31 | history | edited | macbert | CC BY-SA 4.0 |
found out that there is a session cookie generated when submitting the draft so changed the infos
|
| Oct 30 at 13:41 | comment | added | macbert | added some details about the pdf generation | |
| Oct 30 at 13:41 | history | edited | macbert | CC BY-SA 4.0 |
adds details about pdf generation
|
| Oct 30 at 13:26 | comment | added | mona lisa | What is the technical means of generating the PDF? It think that is missing from the question. | |
| Oct 30 at 12:18 | comment | added | macbert | @monlisa the PDF File is generated on the fly and isn't stored in private files but anyway the user needs the permissions to access it's own submissions and as you said it would be another session even if a session would be created. On the other hand its a bit strange when submitting the form finally one can't download the results, while it works if no draft was in place before. | |
| Oct 30 at 11:41 | comment | added | mona lisa | To wit: If I am guessing correctly it would have to be the same session and that’s impossible. | |
| Oct 30 at 11:27 | comment | added | mona lisa | This may be impossible because of Core’s protections for CVE-2017-6922 in drupal.org/forum/newsletters/…. Whether that is true depends on how Webform handles files on drafts. I haven’t yet checked the details. | |
| Oct 30 at 8:00 | history | asked | macbert | CC BY-SA 4.0 |