The student can only see their info and not everyone else's. If they mistype their id, they will have to doublecheck. Perhaps another way to get this is to have two matches or for them to enter their email address instead of their ID. Thanks for highlighting this risk.

The csv will have about 1000 lines.

We have set up a new instance on 5.0 and then now are setting up 4.xx instance because the 5.0 didn't work for the csv solution. I will send this to you shortly.

We have set up a new instance on 5.0 and then now are setting up 4.xx instance because the 5.0 didn't work for the csv solution. I will send this to you shortly.

If the CSV solution doesn't work in 5.x it most probably won't work in LS 4.x either, because actually LS 5.x is just a newer version of LS 4.x. There haven't been all that many changes, especially none that should influence if the CSV solutio works or not (not saying that it is impossible, but highly unlikely that the fault is with LS 5.x).

The student can only see their info and not everyone else's

How do you guarantee this? If I type any student ID, I might be able to access their data. Trial and error. So while one might not have access to ALL personal information of all students, depending on the structure of the student ID, one could get access to quite a few, I guess.

I am just imagining scenarios right now. This might not be a problem in your case, but guessing valid student IDs might not be so difficult.

If the CSV is loaded via JavaScript, one could run code in the console to loop through all rows and print values to the console.

We are weighing the pros and cons. Perhaps they need to type in their last name and id. No data. This is just a registration form for a summer camp. No other data will be shown.

Good to know. I will relay this to my tech person.

palsboard wrote:

The student can only see their info and not everyone else's. If they mistype their id, they will have to doublecheck. Perhaps another way to get this is to have two matches or for them to enter their email address instead of their ID. Thanks for highlighting this risk.
 

But :

1. student can put any number and find the related data (holch point)
2. You allow to load a CSV file via JS : this CSV file can be loaded by anyone looking at the url call. Too easy to get it directly (more quick than console from tparner)

A general system on privacy is "Asking less than you can : get only the minimal".

Thanks everyone for your privacy concerns.

We need to ask for the ID (autocomplete) and email (autofill) to show so to ascertain that the student has filled the ID correctly and confirm their email. But if this is an issue with seeing other kids' info, we will not allow it.

The question remains. We have several other surveys that need the same mechanism of autocomplete and autofill but for a different set of data. Namely, the student will fill out an evaluation form for each workshop that they attend. We would like to make sure that when they enter the workshop ID, the name of the workshop can be autofilled so that they ascertain that they have typed in the correct workshop and can move on more quickly through the surveys.

Your help is much appreciated.

Attached is the LSS and the sample csv. The registration question group is what we would like help with on this thread. We will ask the second part in another thread.