Stacker Customers

The team are looking into this now. We will update once there is more information.

They're on it - will keep you posted on updates <@U024WBD010S>

Getting the same issue, this is having a really negative impact guys

Seeing as this is a permissions issue, which is pretty fundamental to Stacker as a platform so is going to cause a lot of pain for folks, I'm wondering if it makes sense to just roll back the update until the issue is resolved 

Agreed. I have live legal contracts that are visible to people who shouldn’t have access

Probably easier said than done but given the potential severity, I'm wondering if trying to patch it is appropriate vs just restoring it.  

An immediate status update should really have also gone out to warn those who don’t spend their life on Slack!

Hi all, we're taking this very seriously and the team are looking into it - that's useful feedback <@U02E83Q2J7M>, we'll fix this up and then take a look at processes.

<@U01JV1M8PS8> <@U02E83Q2J7M> <@U01B1LTTYQJ> <@U024WBD010S>

Very much with you here <@U0146FKFCKE>. This is super serious. I’m going to give an update on it in the <#CMZK26G76|> channel in a few minutes

In all fairness, the entire so called no-code community seems to run on a break-fix mentality. It’s hard to call Airtable, or any app dependent on Airtable, enterprise class once you delve into the details and intricacies of how they actually work. Even so, the pertinent point is made that any vendor needs to earn the trust of its developers in order to succeed. Proactive transparency is one key to helping that along. 

I’d basically want the same thing, our risk is not legal, so it’s less serious, but I’d need to know what happened, to proactively notify them about it (_I’m pretty sure nobody noticed)_, but still, we need to know and show we are in control of the situation).

My client's clients are lawyers. I found out about this because my client got a call from his client, freaking out about seeing another lawyer's financial status and client base, and worrying about having their data exposed too.

Hi both – we will get on top of this, and give you as much detail as we’re able to

I want to set expectations: this won’t be today, but we will move as quickly as we can on this.

<@U03G3BA8ZE3> will reach out to you tomorrow with more details

Hey Robb – please do get in touch with the support team, and they can make sure your app is configured correctly with Permissions.

You’re entirely right here <@U01B1LTTYQJ> – but I do also accept that helping people understand which feature they should be using for security is entirely our responsibility

I also agree that this response was well below what we would expect for an issue as severe as this.

This is partly because it wasn’t an issue with our permission system, it didn’t hit our most severe response category.

That’s obviously a failing in our process – and something we’ll be fixing to make sure we have a the ability to make the right judgement when things like this come up

<@UMZK2HG6Q> Glide has a similar security vs obscurity between permissions vs filters, and imo very clear explanation between the two with tool tips to warn users of what not to do. I would highly encourage the team to take inspiration from them on this (and other) topics 

Thanks <@U01QZMEN0CD>, we’ll take a look

image.png

Did you manage to solve this? I tried with a width of 100% and inbox looked ok to me, but I'm just using basic data without many fields.

Hey Oli! 100% works OK, but try reducing it and then look at the inbox view and you’ll see what I mean! I’m just trying to find a good balance, the tables seem a bit thin to me at the moment, but 100% is a bit extreme! :wink:

Hi Jack, Please can you send a message through to <mailto:support@stackerhq.com|support@stackerhq.com> and we can take a look into this for you.

Hi <@U03KPPSKT3M>, there was an issue with this but should be fixed now - see thread here: <https://stacker-customers.slack.com/archives/CMZK26G76/p1656944245974579>

If you’re still seeing the issue, it could be due to:
• schema being out of date and the field/option no longer existing in Airtable
• permissions issue

thx <@U02N890SW84> - I’ve looked into the permissions but dont see any issues. Schema is up to date. Would someone be able to take a look for me? Thx

<@U03KPPSKT3M> thanks for checking. It seems like there are still conditions that we haven’t fixed—the team is looking into it.

ok thx <@U02N890SW84> - I did some testing our side and have an observation if this helps:

When I have the button set a default value, the error occurs. When the button allows the user to edit the value, and the user selects the value manually, the error does not occur

Thanks for that—I’ve shared this with the development team

<@U03KPPSKT3M> Fix is live, can you please give it a try now?

efd669105ee2ff83a7abc793166d9e3e65e84da2.png

713ef6ae05f5f035191e33047a613e2ea3f7e451.png

I’d use a formula column to write an IF statement in Airtable, and then filter by Good/Bad in Stacker :slightly_smiling_face:

Thanks for the tip. Could someone maybe also explain how I use an if formula to calculate that the date should only be displayed if it is in the next 180 days (otherwise the field should remain empty)? Thank you so much !

Screenshot 2022-07-06 at 10.15.03.png

<@U03MZJ71DUZ> I’m taking this from <https://support.airtable.com/hc/en-us/articles/203255215-Formula-field-reference#date_and_time_functions|Airtable’s formula reference guide>. but it seems like you could use `DATETIME_DIFF([date1], [date2], 'units')` where date 1 is the field value, date 2 is `NOW()`, and Units is `days`.

Please note that the syntax might not be 100% correct for your use case
```IF(DATETIME_DIFF({Date of expiry},NOW(),"days") &lt; 180, "Expiring soon", "Valid")```

Hey Kevin, the legendary <@U02N890SW84> beat me to it with a far more elegant solution but I typed this up so thought I'd share it anyway :stuck_out_tongue:

_I did it in two stages:_

_1. Calculate the difference between today's date and the end date using this formula:_

_`DATETIME_DIFF(`_
  _`{End Date},`_
  _`NOW(),`_
  _`'days'`_
_`)`_

_2. If that amount is less than 180, return "yes"_

_`IF({Difference in days} &lt; 180, "yes", "no")`_

_(I realise as I type this that you'll probably want to set up an AND to make sure the Difference in days is greater than zero) - here's Airtable support: <https://support.airtable.com/hc/en-us/articles/360058237054-Evaluate-arguments-using-AND-and-OR->_

_3. I then used a filter based on "Should it be displayed" within Stacker. Worth reading this post about how filters work from a security perspective: <https://support.stackerhq.com/hc/en-us/articles/4416415857171-List-Filter>_

many thanks for the support. I'll test it right away!

Unfortunately there’s no way that I know of, though I wouldn’t be surprised if one of you folks find a way :sweat_smile:

I'll try to run a few tests on this and see if it's possible!

Looks like we could get it working if we tweaked the editor a little. The only thing is that markdown doesn't support image sizes, so we'd have to disable the resizing option.

As Airtable doesn't support this, it might be confusing if I enable the image button in the toolbar. What I'll do is to enable support for images, so it means you can copy an image from the browser and paste into the editor. You should also be able to add the markdown directly in AT and it'll show in stacker too. The next release is on Monday so I'll try to get it into that release.

Hey <@U01B1LTTYQJ> i curious what this killer use case! would you mind sharing?

&gt; I have a really killer use case

Hey Mike! Hopefully I understood your question, but you can have multiple permission rules for a given table and role. The main rule to remember is that permissions _give_ access, not take it away. So the more rules you add, the wider the criteria.

For example -
Rule 1: rule where client role can access all records =&gt;  read access to all fields, no create, no update
Rule 2: rule where client role can only access their own record =&gt; read, update, and create access to all fields

The final result is that the client can see all records but only update their own

<@U01ER0XNAV7> I explained wrong… my question is if I have Client X and Client Y, Feature A and Feature B and they need roles each Admin and Standard, then in Airtable can I  have three permissions fields in Airtable:
1. Field Client - X or Y - ownership
2. Field Permissions - Admin/Standard - create/read/update/delete on fields
3. Field Features - Hide/show different parts of Stacker based on which user is logged in
Or make my permissions dropdown multi-select so I can choose “Admin, Feature A”

<@U01B1LTTYQJ> did you ever get an answer to this?

Yes, they cannot do it this way unforutnately.

After a quick glance at the Calendar view, I believe it should be possible to customize all fields that are displayed as “item preview”, not only the title, but the image as well, add other text fields, etc.

Basically treat them like Cards, and allow for customisation.

For now not possible I'm afraid <@U02E83Q2J7M>, but I've added to Canny here - please do upvote! <https://stacker.canny.io/feature-requests/p/choose-a-different-title-in-calendar-view>

Been with Stacker for 2 years now and it’s a totally different company than it was.  They really have a great approach I don’t see in many others.

Happy to, but what do you define as a portal exactly? Not sure I fit the bill

<@U01B1LTTYQJ> Is this sparrow/ event management? :slightly_smiling_face:

<@U0393AW3D37> Great, I'll DM you a calendly link for us to chat.

Ah yes then I have definitely already had the privilege of seeing it when I think you and I spoke quite a few months back. It's lovely! :clap:

I have a Vendor Portal where vendors of my marketplace see their bookings, listings, etc. Happy to demo.

<@U03GTPGKZAS> amazing, I will respond to your DM about Zapier very shortly (haha) AND also send you a booking link. Thank you! :slightly_smiling_face:

Yup! Stacker’s URL structures use Airtable record IDs

CONCAT(“[your-stacker-url]/[your-stacker-view-name]/view/[prefix]“, “record_id()“)

<@U01B1LTTYQJ> wow, super thanks for this.  This helps lots.

No prob! I should note that the admin view actually has a different url structure than the users. There's an FAQ on that on the Stacker site that goes into it if you search for it. 

I'm using an <https://miniextensions.com|Airtable extension> for exactly this

We use Miniextensions extensively. They’re broad and powerful. Unfortunately they can also be aesthetically ugly and throw errors now and again (though that may be due to our massive Airtable base).

Thank you very much :slightly_smiling_face:

<@U01B1LTTYQJ> You could also simply have a dedicated “role” that’s allowed to read all “delivery” items, and use the auto-login link with a redirect to go to the dedicated page that you want to show.

This way, the user will see only what you want them to see.

I don’t recommend using this if you plan on sending that link to users who use your platform (because they’ll be disconnected from their account when logged in into the new one), or to use another dedicated app with a different url.

The advantage of this is that you won’t need to use any other tool that what you use already.

Thanks <@U0146FKFCKE> - I’ve begun playing with this, but I think it would mean that one end user would be able to then click on the Deliveries Menu button and then be able to view all deliveries for that day.

Unless there is a work around for this?

Also, the auto-login with a redirect… how might I go about doing that? Struggling to find that on the Knowledge Centre / the internet.

Effectively I’m trying to create that view via a URL that DPD/Hermes etc send in an SMS message for you to track the status of your order :slightly_smiling_face:

Update - have realised how to deny access to the menu page using the user roles &amp; navigation page.

So now just that auto-login - thanks again!

Auto login isn’t documented, let me find that for you (and sorry wrong Mike :stuck_out_tongue:)

`<https://your-domain.com/login?api_token=your-token&amp;r=/path/to/redirect/to>`

Example :

<https://your-domain.org/login?api_token=xxx&amp;r=/partner/view/par_recXXXX>

Thank you - I must be doing something wrong. I assume the api token `xxx` is actually my Airtable API key?

It’s not, it’s the auto-login token for the user, you can get it by going to Users &gt; Sharing link or something like that (there is one per user, but the goal here is to use the same user account and grant it a special role)

Hmmm I can’t seem to figure it out. I’ve got the single user account and special role, but can’t seem to find that token via a Sharing Link. Had a good nose around, and normally good at these hacky sort of things but striking out. Thanks for your help and patience so far, but will maybe tap you up next week :slightly_smiling_face: Not expecting such great charitable help at 6pm+ on a Friday

Did you get anywhere with this <@U03MWA6J9T5>? I'm just looking into it.

Hi <@U03G3BA8ZE3> - no further than the above no.

Could you direct me to how I find the auto-login token Ambroise was speaking about? :slightly_smiling_face:

Hi <@U03MWA6J9T5> - I've looked into it, and it's not going to be possible right now - the auto login method isn't available in the current version of Stacker.

I've flagged it with the product team - will keep you in the loop on progress, but for now I'd suggest following the suggestions by <@U03GTPGKZAS> and <@USCPEEY8P> (thanks both)

Cheers Oli - and Luis and Peter! - as well as Ambroise :slightly_smiling_face:  Loving this community :slightly_smiling_face:

<@U03G3BA8ZE3> What do you mean, auto-login isn’t available? Are you talking about the auto-sync of the auto-login link? Or the feature itself? :thinking_face:

Hi <@U01B1LTTYQJ>, what do you consider as super wonky? We haven’t seen anything obvious go wrong, but we’ll be happy to take a look. Can you please make a report through the support widget?

had users reporting fields not saving, pages not loading, etc. I'll see if it's still the same today and report it

I would recommend trying to consolidate your apps into just one main app and limit access to info using permissions. 

<@U022US4CCN5> We have decided to move everything into 1 single app for each company, as you suggested, but all of a sudden now have an issue that want to get confirmed from experts like yourself:  *Roles are app-specific and not table-specific.  It’s beginning to seem that nearly all our 50 users would end up as their own Role, as some users would need access to more than one pseudo-app (several tables), and have different permission in these pseudo-apps.*

Is this a confirmed limitation of Stacker in its present incarnation?   If true, having everything in one Stacker app would end up practically impossible to manage?

<@U02N890SW84> Any comment from you would also help greatly.  Cheers.

I am stuck at the end of the dev-road, and just want to get confirmation that:

a.  If we have different Stacker apps for a company, then sync lag is a reality we must accept

b.  If we move all apps to one single Stacker app, then real-time sync is solved, but be ready to have a separate Role for each staff member with the complexities of setting Permissions, that comes with it.

Is the above assumption correct?  Thanks in advance.

Hi <@U02GS844A68>,

Thanks for the question. I would need to better understand the configuration of the app to make the best suggestion.

In general:
• You can assign users roles based on a field value in Airtable to automatically assign roles. You can do this in the user table configuration screen, when you click Users &gt; Cog icon
• You can set permissions in a way where a role can see records only if the record has a link to their user profile. This usually solves the need for multiple roles.
• You can also control which role has navigation access to a particular table. 
Question: what is in your need unique in a way where you would need a lot of roles?

<@U02N890SW84> Thanks for reaching out.  There is nothing that is special about us.  In fact, we develop apps that are relatively basic.  It’s just there are lots of apps and by placing them all in one super app, there would be lots of users (most of our office staff), and many would need access to more than one group of tables in the single Stacker app.   If we set a staff member to have to role in Sales, say Salesperson, that works fine in the Sales Tables.  But that same member might also be part of the product dev team and our Engineering Case tables might not want to give access to all Salespersons, but just that one Salesperson.  So, our fear is that many users end of with a Role which is just them/their name.  Would that end up being too complex to set and manage?  Or you think that is perfectly ok, until something better comes along with new improvements…?

Also, a question about Airtable sync:  is it actually practically possible that there ever would be near realtime sync down the road?  Or is a delay just part of reality and thus the development of Stacker Tables as a substitute?  We just have become very comfortable with Airtable.

Hi <@U02GS844A68>, sorry for the delay in getting back to you.

*Airtable sync*
Due to constraints in Airtable’s API, there is no way to do real-time sync with what Airtable officially provides.

We’re currently exploring a few hacky ways to achieve near realtime sync, but I don’t have anything concrete to share just yet. When we do have something that we believe will work, we will certainly announce it in <#CMZK26G76|>.

*Your use case*
Thank you so much for sharing. In that case, it does seem like working in separate apps might work better in your case, except for the sync delay.

Do you need all the data to be in a single base as opposed to being in multiple bases?

At present, when we ask our users on Stacker to enter a new record in a Contacts , which is in a table, in a “Masters” Base in Airtable, it takes too long for the user to see this added Contact record back in other apps in Stacker.  The Contacts-to-Airtable sync is instant, but then Airtable base syncs across bases and table in Airtable, and it is only updated to Stacker after the next sync, which can be 15mins.

We are thinking of possibly using Stacker Table instead of Airtable for several of our Masters data.  Things like Contacts, Industry List, Customers, etc.  I am presuming this should at least solve the issue that a new record in these Master tables (within Stacker Tables) will show up instantly in various other Stacker tables.  We can link within Stacker Tables, I am presuming.

hi <@U02GS844A68>, there’s no easy way to sync a record from Stacker Tables to Airtable right now.

As Brian kindly suggested, I would most likely recommend trying to consolidate your apps into just one main app and limit access to info using permissions.

When it comes to Zapier, you can apply to try it here: <https://stacker-customers.slack.com/archives/CMZK26G76/p1657095139343649>

Hi <@U02N890SW84>, so it’s possible to link two Stacker tables if it’s in the same app, but not across apps, correct?