# Prevent public access to ODK Aggregate submitted data **URL:** \ **Category:** Support\ **Created:** [March 30, 2015, 4:02pm UTC](https://forum.getodk.org/t/prevent-public-access-to-odk-aggregate-submitted-data/4170 "2015-03-30T16:02:21Z")\ **Posts on this page:** 8\ **Page:** 1
**Author:** ![John\_Wesonga](https://getodk.b-cdn.net/letter_avatar_proxy/v4/letter/j/b5e925/32.png) [@John\_Wesonga](https://forum.getodk.org/u/John_Wesonga)\ **Post date:** [March 30, 2015, 4:02pm UTC](https://forum.getodk.org/t/prevent-public-access-to-odk-aggregate-submitted-data/4170/1 "2015-03-30T16:02:21Z")
Is there a way to secure (only allow a specific list of users to be able to view submissions) a public instance of ODK Aggregate on GAE such that only authenticated users can have access to the submitted data? I tried adding a new security constraint to the web.xml that restricted the "/.\*" root but it had the side effect of blocking ODK collect from doing any data submissions. ---
**Author:** ![John\_Wesonga](https://getodk.b-cdn.net/letter_avatar_proxy/v4/letter/j/b5e925/32.png) [@John\_Wesonga](https://forum.getodk.org/u/John_Wesonga)\ **Post date:** [March 30, 2015, 8:53pm UTC](https://forum.getodk.org/t/prevent-public-access-to-odk-aggregate-submitted-data/4170/2 "2015-03-30T20:53:53Z")
Ping!!..any chance I can get some help with this? > **···** > > On Monday, March 30, 2015 at 7:02:21 PM UTC+3, John Wesonga wrote: \> \> Is there a way to secure (only allow a specific list of users to be able \> to view submissions) a public instance of ODK Aggregate on GAE such that \> only authenticated users can have access to the submitted data? I tried \> adding a new security constraint to the web.xml that restricted the "/.\*" \> root but it had the side effect of blocking ODK collect from doing any data \> submissions. \> ---
**Author:** ![John\_Wesonga](https://getodk.b-cdn.net/letter_avatar_proxy/v4/letter/j/b5e925/32.png) [@John\_Wesonga](https://forum.getodk.org/u/John_Wesonga)\ **Post date:** [March 31, 2015, 7:00am UTC](https://forum.getodk.org/t/prevent-public-access-to-odk-aggregate-submitted-data/4170/3 "2015-03-31T07:00:49Z")
Clearly I should have searched the forum before posting my question, here's the solution [https://groups.google.com/forum/#!searchin/opendatakit/anonymous$20access/opendatakit/Ei7zO30EAHA/mbV1v479-GUJ](https://groups.google.com/forum/#!searchin/opendatakit/anonymous%2420access/opendatakit/Ei7zO30EAHA/mbV1v479-GUJ) > **···** > > On Monday, 30 March 2015 23:53:53 UTC+3, John Wesonga wrote: \> \> Ping!!..any chance I can get some help with this? \> \> On Monday, March 30, 2015 at 7:02:21 PM UTC+3, John Wesonga wrote: \>\> \>\> Is there a way to secure (only allow a specific list of users to be able \>\> to view submissions) a public instance of ODK Aggregate on GAE such that \>\> only authenticated users can have access to the submitted data? I tried \>\> adding a new security constraint to the web.xml that restricted the "/.\*" \>\> root but it had the side effect of blocking ODK collect from doing any data \>\> submissions. \>\> \> ---
**Author:** ![Mitch\_S](https://getodk.b-cdn.net/letter_avatar_proxy/v4/letter/m/3ec8ea/32.png) [@Mitch\_S](https://forum.getodk.org/u/Mitch_S)\ **Post date:** [March 31, 2015, 5:32pm UTC](https://forum.getodk.org/t/prevent-public-access-to-odk-aggregate-submitted-data/4170/4 "2015-03-31T17:32:24Z")
And also, please note that we are not a 24/7 support center. We try to respond to questions within 5 business days. And some questions we don't answer but expect the community to answer. > **···** > > On Tue, Mar 31, 2015 at 12:00 AM, John Wesonga wrote: > > > Clearly I should have searched the forum before posting my question, > > here's the solution > > [https://groups.google.com/forum/#!searchin/opendatakit/anonymous$20access/opendatakit/Ei7zO30EAHA/mbV1v479-GUJ](https://groups.google.com/forum/#!searchin/opendatakit/anonymous$20access/opendatakit/Ei7zO30EAHA/mbV1v479-GUJ) > > > > On Monday, 30 March 2015 23:53:53 UTC+3, John Wesonga wrote: > > > > > Ping!!..any chance I can get some help with this? > > > > > > On Monday, March 30, 2015 at 7:02:21 PM UTC+3, John Wesonga wrote: > > > > > > > Is there a way to secure (only allow a specific list of users to be able > > > > to view submissions) a public instance of ODK Aggregate on GAE such that > > > > only authenticated users can have access to the submitted data? I tried > > > > adding a new security constraint to the web.xml that restricted the "/.\*" > > > > root but it had the side effect of blocking ODK collect from doing any data > > > > submissions. > > > > > > -- > > > -- > > > Post: [opendatakit@googlegroups.com](mailto:opendatakit@googlegroups.com) > > > Unsubscribe: [opendatakit+unsubscribe@googlegroups.com](mailto:opendatakit+unsubscribe@googlegroups.com) > > > Options: [http://groups.google.com/group/opendatakit?hl=en](http://groups.google.com/group/opendatakit?hl=en) > > > > * * * > > > > You received this message because you are subscribed to the Google Groups > > "ODK Community" group. > > To unsubscribe from this group and stop receiving emails from it, send an > > email to [opendatakit+unsubscribe@googlegroups.com](mailto:opendatakit+unsubscribe@googlegroups.com). > > For more options, visit [https://groups.google.com/d/optout](https://groups.google.com/d/optout). > > -- > Mitch Sundt > Software Engineer > University of Washington > [mitchellsundt@gmail.com](mailto:mitchellsundt@gmail.com) ---
**Author:** ![John\_Wesonga](https://getodk.b-cdn.net/letter_avatar_proxy/v4/letter/j/b5e925/32.png) [@John\_Wesonga](https://forum.getodk.org/u/John_Wesonga)\ **Post date:** [April 3, 2015, 4:33am UTC](https://forum.getodk.org/t/prevent-public-access-to-odk-aggregate-submitted-data/4170/5 "2015-04-03T04:33:54Z")
Duly noted!!.. > **···** > > On Tue, Mar 31, 2015, 20:32 Mitch Sundt wrote: > > > And also, please note that we are not a 24/7 support center. > > > > We try to respond to questions within 5 business days. > > > > And some questions we don't answer but expect the community to answer. > > > > On Tue, Mar 31, 2015 at 12:00 AM, John Wesonga [johnwesonga@gmail.com](mailto:johnwesonga@gmail.com) wrote: > > > > > Clearly I should have searched the forum before posting my question, > > > here's the solution > > > [https://groups.google.com/forum/#!searchin/opendatakit/anonymous$20access/opendatakit/Ei7zO30EAHA/mbV1v479-GUJ](https://groups.google.com/forum/#!searchin/opendatakit/anonymous$20access/opendatakit/Ei7zO30EAHA/mbV1v479-GUJ) > > > > > > On Monday, 30 March 2015 23:53:53 UTC+3, John Wesonga wrote: > > > > > > > Ping!!..any chance I can get some help with this? > > > > > > > > On Monday, March 30, 2015 at 7:02:21 PM UTC+3, John Wesonga wrote: > > > > > > > > > Is there a way to secure (only allow a specific list of users to be > > > > > able to view submissions) a public instance of ODK Aggregate on GAE such > > > > > that only authenticated users can have access to the submitted data? I > > > > > tried adding a new security constraint to the web.xml that restricted the > > > > > "/.\*" root but it had the side effect of blocking ODK collect from doing > > > > > any data submissions. > > > > > > > > -- > > > > -- > > > > Post: [opendatakit@googlegroups.com](mailto:opendatakit@googlegroups.com) > > > > Unsubscribe: [opendatakit+unsubscribe@googlegroups.com](mailto:opendatakit+unsubscribe@googlegroups.com) > > > > Options: [http://groups.google.com/group/opendatakit?hl=en](http://groups.google.com/group/opendatakit?hl=en) > > > > > > * * * > > > > You received this message because you are subscribed to the Google Groups > > > > > "ODK Community" group. > > > To unsubscribe from this group and stop receiving emails from it, send an > > > email to [opendatakit+unsubscribe@googlegroups.com](mailto:opendatakit+unsubscribe@googlegroups.com). > > > > > For more options, visit [https://groups.google.com/d/optout](https://groups.google.com/d/optout). > > > > -- > > Mitch Sundt > > Software Engineer > > University of Washington > > [mitchellsundt@gmail.com](mailto:mitchellsundt@gmail.com) > > > > ## -- > > > > Post: [opendatakit@googlegroups.com](mailto:opendatakit@googlegroups.com) > > Unsubscribe: [opendatakit+unsubscribe@googlegroups.com](mailto:opendatakit+unsubscribe@googlegroups.com) > > Options: [http://groups.google.com/group/opendatakit?hl=en](http://groups.google.com/group/opendatakit?hl=en) > > > > * * * > > > > You received this message because you are subscribed to a topic in the > > Google Groups "ODK Community" group. > > To unsubscribe from this topic, visit > > [https://groups.google.com/d/topic/opendatakit/1cX\_xPhoa\_c/unsubscribe](https://groups.google.com/d/topic/opendatakit/1cX_xPhoa_c/unsubscribe). > > To unsubscribe from this group and all its topics, send an email to > > [opendatakit+unsubscribe@googlegroups.com](mailto:opendatakit+unsubscribe@googlegroups.com). > > For more options, visit [https://groups.google.com/d/optout](https://groups.google.com/d/optout). ---
**Author:** ![Francis\_Opiyo](https://getodk.b-cdn.net/user_avatar/forum.getodk.org/francis_opiyo/32/13835_2.png) [@Francis\_Opiyo](https://forum.getodk.org/u/Francis_Opiyo)\ **Post date:** [April 19, 2022, 6:09am UTC](https://forum.getodk.org/t/prevent-public-access-to-odk-aggregate-submitted-data/4170/6 "2022-04-19T06:09:13Z")
Hello, Anyone who has a solution to this challenge? The content cited in the Google groups link above seems to have been inactivated ---
**Author:** ![yanokwa](https://getodk.b-cdn.net/user_avatar/forum.getodk.org/yanokwa/32/1695_2.png) [@yanokwa](https://forum.getodk.org/u/yanokwa)\ **Post date:** [April 19, 2022, 12:11pm UTC](https://forum.getodk.org/t/prevent-public-access-to-odk-aggregate-submitted-data/4170/7 "2022-04-19T12:11:51Z")
[[ODK Community] Is there any way to restrict the odk aggregate page that has been deployed to Google App Engine?](https://forum.getodk.org/t/odk-community-is-there-any-way-to-restrict-the-odk-aggregate-page-that-has-been-deployed-to-google-app-engine/3976) is the link. Note that [Aggregate is no longer being updated](https://forum.getodk.org/t/aggregate-is-no-longer-being-updated/33742). Please use [Central](https://docs.getodk.org/central-intro/) instead. ---
**Author:** ![Francis\_Opiyo](https://getodk.b-cdn.net/user_avatar/forum.getodk.org/francis_opiyo/32/13835_2.png) [@Francis\_Opiyo](https://forum.getodk.org/u/Francis_Opiyo)\ **Post date:** [April 19, 2022, 1:53pm UTC](https://forum.getodk.org/t/prevent-public-access-to-odk-aggregate-submitted-data/4170/8 "2022-04-19T13:53:17Z")
Thanks. That worked for me