# 🍕 Viva Pizza: Making a secure storefront (pizza delivery) on Coda

**URL:** <https://connect.superhuman.com/t/viva-pizza-making-a-secure-storefront-pizza-delivery-on-coda/25324>\
**Category:** Doc Show and Tell\
**Created:** [August 29, 2021, 11:42pm UTC](https://connect.superhuman.com/t/viva-pizza-making-a-secure-storefront-pizza-delivery-on-coda/25324 "2021-08-29T23:42:12Z")\
**Posts on this page:** 10\
**Page:** 1

<div class="post-metadata">

**Author:** ![Paul\_Danyliuk](https://yyz1.discourse-cdn.com/coda1/user_avatar/connect.superhuman.com/paul_danyliuk/32/27228_2.png) [@Paul\_Danyliuk](https://connect.superhuman.com/u/Paul_Danyliuk)\
**Post date:** [August 29, 2021, 11:42pm UTC](https://connect.superhuman.com/t/viva-pizza-making-a-secure-storefront-pizza-delivery-on-coda/25324/1 "2021-08-29T23:42:12Z")

</div>

This has been a successful exploration of how to make a **secure** storefront + production management doc using:

- a sandboxed published doc for placing an order
- a private back-office doc for processing and managing orders and the source-of-truth database

and Coda Forms to connect the two.

> **[Welcome to Viva Pizza! · Viva Pizza](https://coda.io/@paul/viva-pizza)**
>
> The most delicious pizza delivery ever!

👆 Place an order, wait for an email, watch the video 👇

[![](https://global.discourse-cdn.com/coda1/original/3X/3/7/37aeb9f722f6592c918cdd17307365fd69b413f8.jpeg "Viva Pizza!") ](https://www.youtube.com/watch?v=-OwGWdQzL_k)

---

<div class="post-metadata">

**Author:** ![Paul\_Danyliuk](https://yyz1.discourse-cdn.com/coda1/user_avatar/connect.superhuman.com/paul_danyliuk/32/27228_2.png) [@Paul\_Danyliuk](https://connect.superhuman.com/u/Paul_Danyliuk)\
**Post date:** [August 30, 2021, 7:34am UTC](https://connect.superhuman.com/t/viva-pizza-making-a-secure-storefront-pizza-delivery-on-coda/25324/2 "2021-08-30T07:34:08Z")

</div>

P.S. This exploration is very interesting for another reason. If I could build a cart, one could build a Typeform replacement, an interface with any sort of conditional logic to collect input, and send it to the private doc the same way I did it with the pizza orders.

---

<div class="post-metadata">

**Author:** ![joost\_mineur](https://yyz1.discourse-cdn.com/coda1/user_avatar/connect.superhuman.com/joost_mineur/32/30539_2.png) [@joost\_mineur](https://connect.superhuman.com/u/joost_mineur)\
**Post date:** [August 30, 2021, 7:33pm UTC](https://connect.superhuman.com/t/viva-pizza-making-a-secure-storefront-pizza-delivery-on-coda/25324/3 "2021-08-30T19:33:25Z")

</div>

Hey @Paul_Danyliuk ,

This is really built so nice - nice looking, logical, clean, expandable…

I am wondering about one aspect though: this doc is in play mode, which is obviously good for this demo. But when you would actually use this for “your” pizza business, what kind of mode would you use? You would want non-coda users to access this doc as well? Maybe I a overlooking something, but I don’t see it (yet).

Greetings,  
Joost

---

<div class="post-metadata">

**Author:** ![Paul\_Danyliuk](https://yyz1.discourse-cdn.com/coda1/user_avatar/connect.superhuman.com/paul_danyliuk/32/27228_2.png) [@Paul\_Danyliuk](https://connect.superhuman.com/u/Paul_Danyliuk)\
**Post date:** [August 30, 2021, 9:32pm UTC](https://connect.superhuman.com/t/viva-pizza-making-a-secure-storefront-pizza-delivery-on-coda/25324/4 "2021-08-30T21:32:21Z")

</div>

> [@joost\_mineur](#):
>
> You would want non-coda users to access this doc as well? Maybe I a overlooking something, but I don’t see it (yet).

Of course — this is just a storefront, a landing page for anyone to collect an order using the interface I built for them, and submit it in a form. It is intentional that the doc is a sandbox. And I don’t need people’s logins to order pizza — as long as they specify their phone number and delivery address (an email address in this particular demo) and I know how to contact them and where to deliver the pizzas, I couldn’t care enough if they have an account or not. On the contrary, this is less friction for people.

All the processing is done on the backend doc that’s not shared with any of the customers. This is proper frontend/backend separation here.

Think of the @viva-pizza doc as a Typeform basically.

---

<div class="post-metadata">

**Author:** ![joost\_mineur](https://yyz1.discourse-cdn.com/coda1/user_avatar/connect.superhuman.com/joost_mineur/32/30539_2.png) [@joost\_mineur](https://connect.superhuman.com/u/joost_mineur)\
**Post date:** [August 30, 2021, 10:11pm UTC](https://connect.superhuman.com/t/viva-pizza-making-a-secure-storefront-pizza-delivery-on-coda/25324/5 "2021-08-30T22:11:44Z")

</div>

Hey Paul,

Thank you for clarifying that. You put a tremendous amount of work in this ‘demo’ and you have stretched once again what can be done with Coda. Thanks for sharing and showing what’s possible.

I wasn’t aware one can use a form to submit real data even when the doc is in playmode, one more eyeopener.

Greetings, Joost

---

<div class="post-metadata">

**Author:** ![Paul\_Danyliuk](https://yyz1.discourse-cdn.com/coda1/user_avatar/connect.superhuman.com/paul_danyliuk/32/27228_2.png) [@Paul\_Danyliuk](https://connect.superhuman.com/u/Paul_Danyliuk)\
**Post date:** [August 30, 2021, 11:06pm UTC](https://connect.superhuman.com/t/viva-pizza-making-a-secure-storefront-pizza-delivery-on-coda/25324/6 "2021-08-30T23:06:14Z")

</div>

It’s an embed, so yeah, it’s just like a form opened by itself in a new tab

---

<div class="post-metadata">

**Author:** ![Pch](https://yyz1.discourse-cdn.com/coda1/user_avatar/connect.superhuman.com/pch/32/17688_2.png) [@Pch](https://connect.superhuman.com/u/Pch)\
**Post date:** [September 4, 2021, 9:46am UTC](https://connect.superhuman.com/t/viva-pizza-making-a-secure-storefront-pizza-delivery-on-coda/25324/7 "2021-09-04T09:46:30Z")

</div>

This is an amazing doc 🥳 🤩 😁 !

Thank you so much for building and sharing it @Paul_Danyliuk 🙌 !

I’m going to keep it in mind for my future published docs as in terms of UX this is just perfect 🙌 ! (and UX is still something I need to work on 😊 )

Congratulations Paul 🥳 🙌 !!!

---

<div class="post-metadata">

**Author:** ![Korn\_Tris](https://yyz1.discourse-cdn.com/coda1/user_avatar/connect.superhuman.com/korn_tris/32/24921_2.png) [@Korn\_Tris](https://connect.superhuman.com/u/Korn_Tris)\
**Post date:** [February 18, 2022, 10:14am UTC](https://connect.superhuman.com/t/viva-pizza-making-a-secure-storefront-pizza-delivery-on-coda/25324/8 "2022-02-18T10:14:11Z")

</div>

@Paul_Danyliuk Hello, Paul , Thanks for sharing. this is an amazing doc.

I would like to know if i could buy it or access it anywhere? I would love to have POS for my personal doc

---

<div class="post-metadata">

**Author:** ![Paul\_Danyliuk](https://yyz1.discourse-cdn.com/coda1/user_avatar/connect.superhuman.com/paul_danyliuk/32/27228_2.png) [@Paul\_Danyliuk](https://connect.superhuman.com/u/Paul_Danyliuk)\
**Post date:** [February 18, 2022, 5:21pm UTC](https://connect.superhuman.com/t/viva-pizza-making-a-secure-storefront-pizza-delivery-on-coda/25324/9 "2022-02-18T17:21:39Z")

</div>

Hey @Korn_Tris!

TBH both docs are probably public and copyable. You can copy the frontend doc right away from the link, and the backend doc should be copyable as well (you get the link to it after you place an order and receive an email). So, no fee on that as long as you’re able to set it up on your own.

If you need my help setting it up for you, I do consulting at an hourly rate. I have a lot on my plate these days so I’d probably relay the gig to my partner Artem.

If you can manage it on your own but still would like to leave a tip, consider subscribing to [my Patreon](https://www.patreon.com/codatricks) 🙂

---

<div class="post-metadata">

**Author:** ![Paul\_Danyliuk](https://yyz1.discourse-cdn.com/coda1/user_avatar/connect.superhuman.com/paul_danyliuk/32/27228_2.png) [@Paul\_Danyliuk](https://connect.superhuman.com/u/Paul_Danyliuk)\
**Post date:** [April 27, 2022, 8:10pm UTC](https://connect.superhuman.com/t/viva-pizza-making-a-secure-storefront-pizza-delivery-on-coda/25324/10 "2022-04-27T20:10:12Z")

</div>

Here’s a real use case: a doc I built for a local refugee relief center uses this mechanic.

(from ~1:37:30):

[![](https://global.discourse-cdn.com/coda1/original/3X/0/5/0570531dabaa4b5d860d7d369aabd36104e17b3d.jpeg "Uzhhorod Volunteers — Month Recap") ](https://www.youtube.com/watch?v=XQiqHNlo-YY)
