Hello, My survey is active and has a participant table with 12 participants, each with a generated access code. However, the survey is fully accessible without a valid token. Steps and observations: 1. The participant table was created before activation and contains 12 entries with tokens (verified in the Participants panel). 2. Participant settings: "Anonymized responses" = Off (greyed out after activation), "Allow public registration" = Off, "Allow multiple responses with the same access code" = Off, "Enable participant-level response persistence" = On. 3. Accessing .../index.php/533351 with no token: the survey opens normally. 4. Accessing .../index.php/533351?token=ZZZZZZZZ (a token that does not exist): the survey also opens normally, no error message. 5. Tested in two different browsers and in private windows. Same result. 6. Responses from these test accesses were recorded, with the token field empty. 7. During activation I was not offered any dialog to switch the survey to closed-access mode. This looks similar to what was reported for 6.15.4 in forum threads 157442 and 157460, but I am on 7.0.7, which I assumed already included the fix. Questions: - Is there an explicit step in 7.x to switch an active survey to closed-access mode? - What is the expected value of "usetokens" in the surveys table for a closed-access survey, and is it safe to change it on an active survey? LSS file attached. Any help is appreciated — I need to open fieldwork with a restricted expert panel and token-based pseudonymisation is essential. Thank you.

in my opinion, usetokens does not have any effect. But what I can see in your .lss file <access_mode><![CDATA[O]]></access_mode> must be <access_mode><![CDATA[C]]></access_mode>

Is the survey showing that it is closed?
 
Not sure if the attached LSS file is exactly the one you're running. It contains start and stop date in the future.
I have tried the file on the demo installation here on limesurvey.org (which runs 7.0.. No issues so far. Works everything as expected.

Create a new survey and check again. Perhaps 7.0.7 has a bug with tokens nobody has experienced but I doubt that 7.0.8.fixed that.





 

Hm,
I also see no issue.
After removing the start date
entering two participants into the participants table
I activated the survey and saw the usual screen


I activated in closed mode and trying to run a survey without token I got - as expected
 

And with token the survey runs and shows the long long long decription.

At last I entered a non existing token and got - as expected:
 

All tested in 7.0.8.

Joffm