Lawyer form with string in browser

[manueurofax]

Hi,
I found out that with a string similar to the following from someone who has permission to use the Views,
https://www.appsheet.com/start/[...]#view=Anagrafica_Form

you can get the Form to add a new record, even if this user has no permission to add records.
And he can save records even without data, even if the columns are not accessible to him

How can you prevent access or prevent the record from not being saved?

Thanks for your attention

[Steve]

Use Are updates allowed? in the table configuration to control what table updates a user can make.

Use Only if this condition is true of the Add, Delete, and Edit actions for the table to limit their availability.

Use an Editable? expression to limit edit access to specific columns.

Include a conditional in the row's key column's Initial value expression so it's only given a value if the user is allowed to add rows. For example, IFS(("Admin" = USERROLE()), UNIQUEID())

See also: Limit users to particular tables, views, and actions, Get started with security 

[WillowMobileSys]

What subscription plan is your app enrolled under?