Currently in order to list responses to a custom form the permissions on the submission folder have to be set so that all the logged in users have write permission on this folder. Otherwise they only see their own submissions if they only have read permission for some reason
(this is all within a secure extranet that is only accessible to a set user group)
Unfortunately this also means that anyone can edit other people's submissions!
I am currently using a bit of javascript and jQuery to reveal the edit links if the current user matches the Id of the submitted form results (see below)
I am also using a (unique to each form) session variable (checked by javascript) and sent at submit time to hide the custom form if they have already submitted a response (dirty but it works)
My question: is there a better way to create this fuctionality?
A - ensure users submit form once only but can edit own responses.
B - make it easy for back-end users to create new custom forms without having to know all the relevant IDs and where to put the javascript so it all works
We are still on 3.22.3 but are planning to upgrade all the way to 3.28.9 sometime soon