AppSmith users - additional profile info and ability to use as variables

jo-cpa · August 31, 2021, 7:30pm

Wondering if the AppSmith logged in user information/profile is extensible and available as a data source.

example: I’d like to be able to have my users (Viewers) login. Ideally with some additional profile information associated with their account, like phone, ext, maybe some object ids.

One item working on right now is a support dashboard with click to call API post. I’d like to be able to pass the user’s phone extension/number to the post which initiates a bridge call with the supportee.

And I can imagine some other scenarios like this.

vinod · September 1, 2021, 4:23pm

Hi John,

We don’t support adding additional data to logged in user. You can create a map to to store additional data in your backend.

We already have an open issue regarding this in github

github.com/appsmithorg/appsmith

[Feature]Separate FrontEnd variables and BackEnd variables

opened 03:19PM - 30 Aug 21 UTC

lyn444

Enhancement Actions Pod JS

## Summary For pages that are meant to be accessed by different users, we do …not want the user to mess with some key variables. For example, if the user is logged in as a@a.com and we only display all the data related to this account by filtering via parameter in API call, we obviously do not want the users to tweak this to b@a.com to peek data for a different user. However, after seeing the network call for an API request with embedded variable, it is noticed that apparently all the parameters for APIs are passed from FE. For applications that require strong security, this makes them unusable. I suggest that there should be some mechanisms that separate FE and BE variables. This might need some redesign but have the following benefits: * Some sensitive variables are totally not tweakable from the FE. For example, the current logged users, permissions, etc. * Some other data that require user selection, for example, items in the drop-down list, can be keyed. So only the key is stored. Actual values are in BE and will be transformed automatically. This also prevents a certain degree of tampering.

jo-cpa · September 29, 2021, 7:14pm

Technically, the Appsmith login (email address) will work for my needs.

Is that available to be used as a variable for the query?

I don’t really understand the gitub conversation that much.

nidhi-nair · September 30, 2021, 5:05pm

Hi @jo-cpa ! Yes you do have access to the logged in user’s email. This is stored in the appsmith object at appsmith.user.email. The exception to this is if users log in via Github OAuth2 in which case we wouldn’t have their email IDs stored.