Stacker Customers

“Magic links” A.K.A. sharing links do not exist in the current iteration of Stacker, so it wouldn’t be possible to construct or otherwise get them from the app.

It’s possible that we may be able to build a similar feature in the future, but there are fundamental security problems with having an authentication link that never expires, so another approach would be necessary, as otherwise they can easily be acquired and reused at any time.

While they could be revoked, it was a manual process, and in order to know that you should you’d first need to know that one was compromised, and which one, and then it’s really too late.

With that in mind, we’d love to understand the use case better, where users can’t (won’t?) enter their email to get a one-time password to have a login session on that device, without even needing to know a password. It’s worth exploring.

We want to present clients with specific options.  There are no sensitive information in these options so even if the link would be compromised it would not be a problem in this specific usecase.  If there was any way of requesting a time based token for a user via api that would also work. And even the option to revoke the token via api once the client has made their decision that would also work.

In essence we just want the client to have a seamless experience accessing the options we want to present them.

Hope that makes sense but please let me know if I need to elaborate more.

As it happens, I have 2 clients with similar use-cases that would immediately be able to use this feature

It sounds like some sort of “public access” option could potentially work in that case. What do you think?

Sharing links are, effectively, a sort of public access. But people don’t think about them that way because it’s a “login”. It may not seem like much, but it’s the difference between sending someone a link to <http://www.example.com/mypublicpage|www.example.com/mypublicpage> and <https://testsalescrm-2.my.stacker.app/login?api_token=80d8d0f4-b1e0-45dc> — the second one _looks_ like it’s secure, when really there’s nothing secure about either: anyone and everyone going to either URL would be able to access it freely.

Hi <@U03RT7UAPPU> the public access link could be cool but its not access to a general page that I am after in this usecase, I need the person with the link to have access to only certain data in the app and limiting like you would a user makes sense to me?  but you could technically have it defined by other parameters in the url also?

Understood. But URL parameters would also not be secret, so I don’t see how that would be different. There’s a feature request somewhat in this area, if you’re interested: <https://stacker.canny.io/feature-requests/p/public-permissions>

I understand - again in this usecase the intention/requirement is not security or secretness as much as it is exposing certain data to people dynamically i.e. blue people can be sent the blue link and they will only see the fields relevant to blue people and the same would apply to red.  The fact that in this case it would be a single person is almost irrelevant.

There are just "infinite" derivatives or combinations so manually building out these sets is not feasible, so using stacker/airtable to build the interface and logic could be a (low-code) option.

I could in essence have a public site with filters and then have them go there and ask them to filter.  What I am wanting is to send them a link that would pre-filter the data based on parameters coded in the link.

I will check the feature suggestion mentioned above,

<@UMYH0ARQT> wouldn't you achieve the same with any kind of form tool with url prefill functionality? google forms or jotform has this, for example. the data submitted this way would then be passed via integration into your backend, whatever that is..

Hey <@U0534ACTYE5> - Lets say the client is a library and I want to display books related to their interests  ranked based on how popular the book is.  I also do not want to show the books they have already checked out or tagged as not interested.  All this is possible if I had them login the normal way but as this info is not sensitive I would love for the experience to be simple where they just click on a link and get taken to their personalized view.

Using form prepopulation would work in simple use cases but wont cut it in this instance - thanks for taking the time to make the suggestion though, really appreciate the help :blush:

<@UMYH0ARQT> context is everything :slightly_smiling_face: thx for the details - indeed, in this case, a form isn't suitable.
hope you find a way, though!

CleanShot 2023-05-12 at 10.31.22@2x.png

CleanShot 2023-05-12 at 10.29.36@2x.png

Hi <@U0534ACTYE5>, when using an action button and select the pencil icon next to the field you can toggle on “Enable default value” and choose the default value for the action to be checked.  You would only need to click the button to check the box.

You can place this button on the list view so you do not need to open the record to submit this action. If this is not what you are seeing, could you show us a screen shot or reach out to support and we can look into your app in more detail?

<@U040KEGR3RA> does the "list view" need to be of any particular type? table/kanban/list..?

Yes, action buttons cannot be on an Inbox view or kanban views.

the solution with "Attended" button next to each of the related records is the best I found so far, yet it's like 20 clicks (the usual number of attendance records per training) compared to one. ofcourse, the single-click solution would require the user to then use another record-specific button to mark those who didn't attend as unattended.
still, the combination of the buttons would result in much less clicking than a current solution.

image.png

(posting again, as the images in the original reply were wrong)
<@U040KEGR3RA> so here's a Training record opened, with a related list of Attendance records. i'd like a button that marks all Attendance records as present (i.e. "Attendance" field would become checked).
however, no matter what I do, both of the "update attendance" buttons at the top keep asking me which Attendance records i'd like to process (2nd. screenshot). i'd like it automatically assume to process all the Attendance records related to the Training record.

Hi Juraj,
is the check box at the bottom: Always show confirmation pop-up  unchecked?

Would you mind contacting support directly so we can look at your app specifically :slightly_smiling_face:

I think you will need to run an automation on this. 
I guess you have a course table and an attendance table and they are linked via the courseid.
If you click the "mark all as present" which is located on the course table you need to run an automation to mark all related attendance records as present.

I did something similar the other day.

While it needs to be linked to the User table, you can use an Airtable field as the Created By field: <https://support.stackerhq.com/hc/en-us/articles/4412328252563-Created-By-Field#testing-the-created-by-field-0-2>

If you’re having trouble after following the directions in that guide, please reach out to support with the details of what step you’re getting stuck on and why, and we can look into it. :)

Heya, are there any you're particularly interested in?

I’ve got one project where I’d be interested in seeing how *Box* and *Xero* 360 integrations work. Another where *OneDrive* and *QuickBooks* would be involved. Possibly some interest in *<https://quickbooks.intuit.com/time-tracking/|QuickBooks Time>* too, so not sure if that’s supported or not?

Xero, Box, OneDrive, and QuickBooks are available through 360 Data, but not QuickBooks Time (unless Intuit allows you to access that data through their QuickBooks API, though <https://tsheetsteam.github.io/api_docs/#getting-started|it appears to be separate> as “TSheets”). And keep in mind that all 360 Data connections are read-only and limited to the Enterprise plan, though it’s available as part of the free trial.

Thanks Peter - I think it's possible to give it a go via creating a trial account as brenty says. Do you have an idea of what kind of apps you'd build with those/ what the use cases are?

Let me know how you find the integration itself as well and any issues/ feedback you have.

I’d love to be able to learn a bit more about what data fields are accessible to Stacker from *Xero* and *QuickBooks* via the 360 Data connection. A documented case study would be very useful to read about. One of the first use cases I’d be looking to explore is for a large electrical services firm who maintains many client records already in *QuickBooks*. I’d like to gain access to those client records to view in Stacker as that would 1) form the basis of a new user table, and 2) when that client/user table in Stacker is built out, the ability to have read-only access to invoices and/or account balances would be great. Similar use case for a client using *Xero*.

For *Box* and *OneDrive*, read only access to cloud storage is fine. Typically there is going to be one client folder stored in the cloud that would be nice to gain access to in Stacker so that the user could launch their Box or OneDrive client software to open and view a file of interest linked to Stacker record.

Hey Puneeth, I think i get what you're asking but I want to make sure. Could you give me the end to end of what you are trying to do here? Feel free to DM me too if you'd rather share this privately.

hey david, what you are observing isn't expected behaviour - could you follow up with support and provide them some information on the base/ app you saw this happening on, etc?

<@U02LWNFKVK9> When I create a record in a base directly in Airtable, it does not sync to Stacker.  However, if I update an existing record directly in Airtable it does update in Stacker instantly.  Just trying to work out if that is intended or I have an issue - having thought more about this, I have automations that create records directly via Airtable automations so I'll need to check if they sync into Stacker automatically.

Yeah, I understand the issue you are facing - thanks :slightly_smiling_face: What I am saying is that this _not_ intended behaviour - we expected new records to sync in too. So it'd be great if you could follow up with support so we can ask you a few more specific questions about it and look into it.

Thanks - I replied to your unedited thread :slightly_smiling_face:

Strangely, it's now all working and having just tested the automations. the records are being created and sync'd so all is good - not sure what was up earlier today when I tried this - gremlins in the system :slightly_smiling_face:

All is good though.  Thanks

Cool good to know. Definitely keen to look into any potential issues with this new feature so don't hesitate to report any of them even if you think they are one offs!

SFDC users - has anyone found a way to pull in files from their SFDC database? CMS or Attachments or Files objects arent available in the list of tables.

Has anyone found a way to display a multi or single-select field as radio button options or a checklist instead of a dropdown? Using either custom CSS or Javascript? Seems like tablestakes for most forms. Something like this.

seems like it… :face_with_raised_eyebrow:

Hey folks – we’ve had a few of us internally get that too

It seems to have resolved itself for me after a hard refresh

Sorry about that – it seems to have been a blip. We’ll keep looking for the root cause, but thing seem settled now

Screen Shot 2023-05-19 at 6.50.30 pm.png

CleanShot 2023-05-19 at 10.26.23.png

Have you got some custom CSS on the app? I just tried on my test app and I am able to see the logout

You should be able to use CSS for Custom pages, though the way to use it will be slightly different because the structure is slightly different.

You could try using `.stk-content` or `.stk-content &gt; div:first-child` as the selector

<@U03R6S094LT> Our <https://www.stackerhq.com/stacker-experts|Stacker Experts> should have knowledge with CSS customizations.

What exactly are you looking to do in your app?

You could use an IF function, or REGEX_MATCH. You can read more about formula functions in our <https://support.stackerhq.com/hc/en-us/articles/4415076803731-Formula-field#list-of-formulas-0-2|help center article>.

I would say it’s doable using custom JS + something like Zapier/Make/Pipedream.

Or maybe using the built-in Action button that triggers Zapier? Simpler

<@U018AL5U830> if you want to try out the Zapier route and get stuck I'd happily see if I can help

Yes zapier was the solution I wasn’t thinking of! I’ll give it a go.

Let me know if you need a second pair of eyes to look things over :slightly_smiling_face:

So I’m in zapier, and it’s pulling a record, but I’m not sure how to access the page the user was on when they clicked the button (which would tell me the connecting record I need to remove). Is that possible?

Ah, that’s why I thought of custom scripts first. It’s because Zapier lacks the context of the click... And I don’t think you can provide it.
The only solution I see is custom scripting then, at least for now

Yea. I was hoping it sent more info to zapier. I ran into this same problem trying to use airtable automations.

Hi <@U018AL5U830>, I've had a play around and you're right, Zapier isn't pulling enough data to make the connection between the two records as far as I can tell. Would you be up for adding this as a <https://feedback.stackerhq.com/feature-requests|feature request>? Any extra context you can provide around what you're trying to do would be super helpful

Added here <https://feedback.stackerhq.com/feature-requests/p/unlink-record>

Possible via custom JS, but there aren’t any built-in “no-code” feature to do that

Sorry Brett, we don't currently have any out of the box field validation in Stacker, but definitely something on our radar.

Capture d’écran 2023-05-24 à 14.22.36.png

Hey <@U0475GGUN2J> , please reach out to our support team through the support widget and we’ll be happy to take a closer look

this also happened to me today. Just pressed repair on 2 sources.

Thanks folks—we’re eager to look into these, and your reports mean a lot. If you haven’t already, please send them through the support channel so we can take a look at your specific case

100% agree.  Stacker should be supporting custom scripts and making writing them them safer, easier, and more modular/portable, rather than removing them.

Hey <@U0146FKFCKE> and <@U01B1LTTYQJ> –

I definitely understand the need to expand capabilities via custom scripts – and we are making sure that everyone who’s currently using these is still able to do so (including letting our Stacker Experts continue to use these with current and future clients).

***

We’ve shifted this up to enterprise to help us get the right folks onto the right plans. We’ve found that most people using this on lower plans are just using this for integrating analytics scripts and similar.

We’ve already started be adding some native integrations (Intercom and FullStory) to allow Pro workspaces integrate these without needing custom scripts, and we’ll continue to add new ones as they gain popularity.

We definitely want to work out a way to allow more extensibility with scripts in the future, but sandboxing this in a way that is guaranteed secure is tough — especially because we need to find something that works for everyone who’s using Stacker, including folks who have hundreds of users with app creation rights in a single workspace.

I see, I had missed the fact/email about Stacker experts could keep doing so, even for future clients - that got me   good :sweat_smile:

who exactly is a "stacker expert"? i mean, i've found the website with the list if individuals, but i don't quite understand their purpose nor relevance in this context.

<@U0534ACTYE5> Stacker Experts are people with a lot of experience building Stacker apps for themselves and their clients. They can be hired for complex projects or customizations that we don’t offer out of the box.

In this context they are someone we can trust when it comes to security of custom scripts. In addition, all customers who have been on the Pro plan prior to May 24 will still have access to custom scripts as a part of the legacy offering.

Hope that helps explain things further. If you have any other questions, don’t hesitate to ask. :slightly_smiling_face:

<@U0534ACTYE5> I do agree we could do a better job of explaining the Stacker Experts on our website - I'm going to take this on to add some more context / explanation

Great question! I’m not entirely sure so I’ll double-check with the engineering team and get back to you

I can confirm that we use the Salesforce REST API and the calls count towards any API use limits. We estimated that we shouldn’t consume API call allowance as we poll only every 15 minutes, but it might depend on what your allowance is.

that's what I was afraid of. but I'm afraid there's no easy solution to have it another way around, esp. if SFDC isn't your primary backend of focus. anyway, thanks for the confirmation!

Hi <@U04GGQW5LUD>, here's a tutorial covering how you could do it with Zapier: <https://community.stackerhq.com/t/duplicating-a-record-as-an-end-user/566>

You could also upvote this feature request and add your own context here: <https://feedback.stackerhq.com/feature-requests/p/duplicate-record-action>

adding diagram:
(horizontal arrows without description indicate which table contains a field relating it to the other object; e.g. instr. assignment points both to instructor and to training, while training itself doesn't point to any of the depicted entities)
if I use "instructor assignment" as a user table, it works fine, as the permissions can be configured to only show attendances where 'Training' is the same as 'training' in 'instructor assignment' record.
however, this won't work, as there's more than just a single instructor assignment for each of the instructors, therefore the email field would not be unique.

update:
so i figured out a workaround: if I create a sort of a "helper table" where records would comprise of lookup fields over to the entities I need to connect this way, the permissions management would then allow me to use this helper table in order to create permission rule.
is this how such problem is supposed to be resolved in stacker?

Hey <@U0534ACTYE5> You don’t need to create a helper table—instead, you can create either a Stacker automatic link that links records based on a matching field. If any of those tables then link to the Users table, you can use permissions based on that.

<@U02N890SW84> would you please provide a help article dicussing this solution? i tried googling, but not 100% sure i found what you mean.

Absolutely, my pleasure.

<https://support.stackerhq.com/hc/en-us/articles/4409598238099-Creating-links-between-tables>

The instructions are mentioning Airtable, but it is the same for every data source.

(edit: updated for clarity)
<@U02N890SW84> i gave the solution a try, but i'm afraid it won't work for us, as there's no field on training object we could use in a rule for linking with instructor object.
i thought i could create a link based on another linked field, but it seems "Automatic link" field type isn't supported in "Automatic link" rule configuration (which, as I understand, would be required for this to work for us)

"Instructor assignment" would provide such field (as it contains both Instructor as well as Training lookup fields), but that involves the above-mentioned automatic link field to be used in another autolink's rule.

Ah, understood—thanks for clarification. For more in-depth help, you can always reach out to our support through the support widget (question mark icon &gt; contact us)

We can then take a look at your specific setup and see if we can find a way to make it work

<@U02N890SW84> thx for the suggestion - the widget says reply time is a few hours on average :sweat_smile: hope that's not really the case..

We’re a small support team, so our aim is to respond within 24 hours during weekdays. Most of the time we will be much quicker, but it depends on the load and who is in. :simple_smile:

i undarstand :slightly_smiling_face:
it feels like there should be a way to do this, though maybe not actually straight-forward. i'd assume i'm not the only one with similar requirement..