# Create the Notes taking app without accounts

**URL:** <https://discourse.sst.dev/t/create-the-notes-taking-app-without-accounts/349>\
**Category:** General\
**Created:** [July 20, 2018, 8:56am UTC](https://discourse.sst.dev/t/create-the-notes-taking-app-without-accounts/349 "2018-07-20T08:56:47Z")\
**Posts on this page:** 6\
**Page:** 1

<div class="post-metadata">

**Author:** ![Manu66](https://yyz2.discourse-cdn.com/flex032/user_avatar/discourse.sst.dev/manu66/32/193_2.png) [@Manu66](https://discourse.sst.dev/u/Manu66)\
**Post date:** [July 20, 2018, 8:56am UTC](https://discourse.sst.dev/t/create-the-notes-taking-app-without-accounts/349/1 "2018-07-20T08:56:47Z")

</div>

Hi,

I’m following the tutorial to create a note talking app, however I want my app to be slightly different: I don’t want accounts. Notes will not belong to any user and everyone can access notes.

What should I change to achieve that?

Thansk

---

<div class="post-metadata">

**Author:** ![jayair](https://yyz2.discourse-cdn.com/flex032/user_avatar/discourse.sst.dev/jayair/32/9_2.png) [@jayair](https://discourse.sst.dev/u/jayair)\
**Post date:** [July 21, 2018, 1:45pm UTC](https://discourse.sst.dev/t/create-the-notes-taking-app-without-accounts/349/2 "2018-07-21T13:45:41Z")

</div>

There are a few ways to do this but the one that would take the least amount of changes would be to set `mandatorySignIn` to `false` in the React app - [https://github.com/AnomalyInnovations/serverless-stack-demo-client/blob/master/src/index.js#L12](https://github.com/AnomalyInnovations/serverless-stack-demo-client/blob/master/src/index.js#L12).

To enable **Enable access to unauthenticated identities** in your Identity Pool. And in your unauthenticated role, allow access to S3 and API Gateway.

In the above setup you don’t really need to create a User Pool and those parts can be completely skipped.

I might have missed something but that is roughly the steps.

---

<div class="post-metadata">

**Author:** ![Manu66](https://yyz2.discourse-cdn.com/flex032/user_avatar/discourse.sst.dev/manu66/32/193_2.png) [@Manu66](https://discourse.sst.dev/u/Manu66)\
**Post date:** [July 21, 2018, 7:53pm UTC](https://discourse.sst.dev/t/create-the-notes-taking-app-without-accounts/349/3 "2018-07-21T19:53:26Z")

</div>

Hi Jayair,

Thanks for the reply. The thing is that I’m not using Identity Pool at all in my app.  
Ive completely skipped those steps. Shall I still create and use the Identity pool?

Thanks

---

<div class="post-metadata">

**Author:** ![jayair](https://yyz2.discourse-cdn.com/flex032/user_avatar/discourse.sst.dev/jayair/32/9_2.png) [@jayair](https://discourse.sst.dev/u/jayair)\
**Post date:** [July 21, 2018, 10:02pm UTC](https://discourse.sst.dev/t/create-the-notes-taking-app-without-accounts/349/4 "2018-07-21T22:02:44Z")

</div>

So the Identity Pool gives you temporary credentials to access any AWS resources you connect to through the frontend. If you want to use S3 to upload from the frontend you need an Identity Pool.

---

<div class="post-metadata">

**Author:** ![Manu66](https://yyz2.discourse-cdn.com/flex032/user_avatar/discourse.sst.dev/manu66/32/193_2.png) [@Manu66](https://discourse.sst.dev/u/Manu66)\
**Post date:** [July 25, 2018, 1:55pm UTC](https://discourse.sst.dev/t/create-the-notes-taking-app-without-accounts/349/5 "2018-07-25T13:55:05Z")

</div>

Thanks for the answer, but I don’t want to use S3. I only want to add/edit/delete records to the DynamoDB database. Is this at all possible without forcing people to create an account?

---

<div class="post-metadata">

**Author:** ![jayair](https://yyz2.discourse-cdn.com/flex032/user_avatar/discourse.sst.dev/jayair/32/9_2.png) [@jayair](https://discourse.sst.dev/u/jayair)\
**Post date:** [July 27, 2018, 11:02pm UTC](https://discourse.sst.dev/t/create-the-notes-taking-app-without-accounts/349/6 "2018-07-27T23:02:11Z")

</div>

If you are connecting to the DB through Lambda, you can leave out Identity Pool as well.

But just to be clear, creating an Identity Pool and allowing unauthenticated access does not require your users to create accounts.