I am using pre-filled forms to collect records from users. The form fields include linked records.
I’ve just realized that anyone with the URL can simply remove the parameters at the end of the URL link to view the base form URL and as a result, will be able to see all of the linked records in those fields.
For example, we have a link for a vendor to add a bid. It is pre-filled with that vendor’s information from a linked field. If the vendor is smart, they can remove the parameters from the URL to see the base form and then view all of the vendors in our table from that field.
How can we collect data from users with pre-filled parameters in a way that they cannot access the base form?