Display Header HTML to only Logged in Users

[DigitalStartup (Craig)]

If I write a snippet of code in the Header (i.e. a banner or advertisement message), is there a way to wrap the code in something that ensures it only gets display to logged in users?

[daxen (Daniel)]

hi,

I’m looking for something similar.
i want to show a static html menu at the top, which should only be visible for registered users.

I would be interested in a solution too.

best regards,
Daniel.

[omarfilip]

Perhaps like this - wrap it in a div, i.e. logged_in_content and hide it from users who are not logged in:

html.anon div#logged_in_content {
  display: none;
}

as mentioned by @Falco:

Display banner topic only to logged in users?

Add the banner topic and hide it with CSS, the html.anon selector can hide it from non logged users.

[daxen (Daniel)]

I don’t want to hide it.
i want to deliver the html block to registered users only.

[omarfilip]

This will display it to those who are logged in and hide for those who are not.

[daxen (Daniel)]

yes, i know how css works

but this is no solution.

i want to deliver the html block to registered users only.

i dont want that not logged in users can see the html in page-source or it can be indexd by search engines.

its a closed forum and hiding with css is no solution.

i already tried this in the admin backend:

Adding to plugin-outlets using a theme

<script type='text/x-handlebars' data-template-name='/connectors/header-after-home-logo/add-header-links'> {{#if currentUser}} <a class="nav-link " href="http://google.com" target="_blank">My Site</a> {{else}} <a class="nav-link " href="http://google.com" target="_blank">Your Site</a> {{/if}} </script> Try this

but without success.
the script tag an inner-html is not published.

[DigitalStartup (Craig)]

Can something similar be done for hiding HTML from certain Groups? Or is a simple CSS solution too much to ask for this?

Edit: I misspoke. I didn’t mean individuals, just Groups. @pmusaraj @omarfilip

[pmusaraj (Penar Musaraj)]

Search meta for either “currentUser” or “api.getCurrentUser” and you should see several code examples. You can use this to determine whether a user is loggedin, and then act accordingly.

[omarfilip]

Check if this method is still valid:

CSS classes for group membership? (For simplified UI mode)

There might be something that exists in Discourse already - but I personally don’t know of it… Here is some code I wrote a long time ago and it still appears to work… … however there is probably a far better way. It may / may not help you. For a specific username <script> if (window.jQuery) { window.jQuery(function ($) { var u = Discourse.User.current(); if (u && (u.username === 'DeanMarkTaylor' || u.username === 'BobTheBuilder')) { // Here is where you could add a C…

[omarfilip]

Edit: I misspoke. I didn’t mean individuals, just Groups .

I’m not sure, but explore this topic:

I want to customize UI based on the users group membership

This reminds me that the issue of wanting to customize the UI based on the users membership in groups has come up in various forms before (can’t find too many topics though, so maybe it was just in my head). For example: And then there is, of course, the “Click me” button plugin: Also: In more general terms, this means that on certain forums groups distinguish quite different user groups (esp. on those forums where setting up different discourse instances was an option). So the questio…

[daxen (Daniel)]

this is a good solution, I have tested, but unfortunately not what I am looking for.

I’m looking for a server side solution, not a client side (css/js) solution.

[pmusaraj (Penar Musaraj)]

Why do you have to have a server-side solution? Discourse is a full JS app, all of the header components for example have their html generated in JS. You can write the group-specific html in JS, and it will never be displayed to non-group users.

[daxen (Daniel)]

Why do you have to have a server-side solution?

because my html content i want to show is only for logged-in users.

with this js solution every not logged in user can access the .js file over the url which is included always (in the login page too)

http_s://forum.domain.tld/theme-javascripts/83c1451748e441c882ef44430f033c57bb1ab1dd.js

and can see my js-injected html thats only for logged-in users.

i need a secure solution, not css/js pseudo secure solution.