I have the need to provide a webapp that is to be run like a kiosk.
Requirements are that it can only be accessed from the main location

My first thought was to provide a double logon where a staff member logins and is allowed due to their rights.

From the dashboard they then enable a patron logon screen. However rethinking this seems it may cause other issues.

Has anyone come up with this scenario?

I also though of using geolocation but again unsure if there are possible drawbacks

Another was requiring a url paramater.

Hope I have asked this question correctly