# Create a blog/userId page

**URL:** <https://discourse.sst.dev/t/create-a-blog-userid-page/483>\
**Category:** General\
**Created:** [September 26, 2018, 11:13pm UTC](https://discourse.sst.dev/t/create-a-blog-userid-page/483 "2018-09-26T23:13:24Z")\
**Posts on this page:** 2\
**Page:** 1

<div class="post-metadata">

**Author:** ![alex-romanov](https://avatars.discourse-cdn.com/v4/letter/a/ac8455/32.png) [@alex-romanov](https://discourse.sst.dev/u/alex-romanov)\
**Post date:** [September 26, 2018, 11:13pm UTC](https://discourse.sst.dev/t/create-a-blog-userid-page/483/1 "2018-09-26T23:13:24Z")

</div>

Hi, I’m trying to create a view where a nonAuthenticated user can view an Authenticated user’s notes (without edit or delete capabilities of course).  
I’m pretty new at working with backend stuff and APIs so any pointer into the right direction will help.  
Thanks.

---

<div class="post-metadata">

**Author:** ![jayair](https://yyz2.discourse-cdn.com/flex032/user_avatar/discourse.sst.dev/jayair/32/9_2.png) [@jayair](https://discourse.sst.dev/u/jayair)\
**Post date:** [October 1, 2018, 6:57pm UTC](https://discourse.sst.dev/t/create-a-blog-userid-page/483/2 "2018-10-01T18:57:11Z")

</div>

Yeah you need a couple of changes.

Allow unauthenticated identities in this chapter [https://serverless-stack.com/chapters/create-a-cognito-identity-pool.html](https://serverless-stack.com/chapters/create-a-cognito-identity-pool.html) and give the specific API access in the uauth role.

Set this flag to `true` [https://github.com/AnomalyInnovations/serverless-stack-demo-client/blob/master/src/index.js#L12](https://github.com/AnomalyInnovations/serverless-stack-demo-client/blob/master/src/index.js#L12).