Secrets Manager & members

Ask the community
1

I have this use case: page with signup for a daily email, like a news letter . I ask email address and a stop date. Person who enters these data is NOT made a Member, I don´t want that. Also have no Members Area. I just want to send an email and therefor access Secrets Manager to retrieve email key. But according to docs, this will not work, because a)user is anonymous, thus no access to Editor b)no Members area.

Notes:
By default, site contributors do not have permission to create secrets and view secret values in the Secrets Manager. Contributors who have access to the editor can retrieve a secret's value using code.
To use the Secrets API, you must add a Members Area to your site.

Is mine such a strange use case? Shouldn´t there be some way to use Secrets Man. from backend code with something like “SuppressAuth” or would that make it very insecure?

Anyway, back to storing keys in backend code for now.

2

Why don’t you store the emails in a regular database? I’m not sure to understand your use case

3

I think by ’ email key’ he means the 3rd party mail service provider’s api key required to send emails.

4

I do store them in a reg. db. But before I can send an email, I have to retrieve the key email provider gave me. I wanted to use Secrets Manager to store it. But it states clearly you cannot, because there is no logged in user with access to Editor and I have no members area: the form lets anomymous users sign up.

5

What prevent you from adding the member area and not using it? You could hide sign up / sign in (+ setting up approval for new member).

6

@plomteuxquentin It would still leave me with the problem that an anonymous user is still an anonymous user in the backend, thus without rights to editor, thus not able to retrieve API-key from Secrets Manager in backend.