Frontend Userlist Guest Access Based on Token possible?

I need to have certain users access a user list using a specific search parameter, to check certain things. So for example I would give them the user list's URL and a search parameter would be appended by them externally, and the page would show the search results.

I want to avoid them having to login (unless there is a way to have them login via autoactions and be directed to the list automatically with that search parameter being passed on after the login action).

Otherwise, I can just have them access it as a guest, and have them use a Token ID, since I still want to protect that information.

Is there a way to do this all in one URL request? Either:

A. One URL logs them in that has the search parameter and they are redirected to that userlist with that parameter being passed on so they see the results page

or

B. One URL that targets the list with a Token ID (auth code/password etc.) that they only would have, which displays the results of that userlist.

xengent wrote: I need to have certain users access a user list using a specific search parameter, to check certain things. So for example I would give them the user list's URL and a search parameter would be appended by them externally, and the page would show the search results.

I want to avoid them having to login (unless there is a way to have them login via autoactions and be directed to the list automatically with that search parameter being passed on after the login action).

Otherwise, I can just have them access it as a guest, and have them use a Token ID, since I still want to protect that information.

Is there a way to do this all in one URL request? Either:

A. One URL logs them in that has the search parameter and they are redirected to that userlist with that parameter being passed on so they see the results page

or

B. One URL that targets the list with a Token ID (auth code/password etc.) that they only would have, which displays the results of that userlist.

Hi and thanks for posting.

As this request is out of scope of normal usage and requires (if doable) code proposal from developers our response might take some time.

I am bookmarking this for our developer team to reply to as soon as possible.

Using CB Auto Actions acting on onBeforeDisplayUsersList with a Redirect action you can condition for whatever token you want under Conditionals. If the condition fails specify a redirect URL to redirect away. Condition example as follows.

[var1_listid] Equal To USERLIST_ID_HERE
[get_token] Not Equal To TOKEN_HERE

I think the issue will be when you perform a search since the token won't be a part of the GET/POST data. You'd probably need to take this a step further and use a Code action to add a hidden input to the form with the token so it can be conditioned on search and paging.

It's possible to login using CB Auto Actions, but I really don't recommend it as you're going to have security issues trying to do that from URL. The safest way to do what you're wanting is to just require them to manually login and protect the userlist using proper ACL.