Anvil.users.get_user() and security

[stucork]

This the typical approach I take from another thread.

Essentially raise exceptions server side when you find there is no logged in user but there should be.

User info and login

Make sure you have added the form show event in the design view. [Screen Shot 2020-04-19 at 19.11.43] For something like this I always raise an exception in server calls if there is no logged-in user so that they can’t access data. def ensure_user(): user = anvil.users.get_user() if user is None: raise anvil.users.AuthenticationFailed('No logged in user') return user @anvil.server.callable def get_data(): user = ensure_user() return data Remember if you have anything on the …