Damian
|
| Posted: 08/18/2004, 5:31 AM |
|
This is a multi-part message in MIME format.
------=_NextPart_000_0008_01C48572.C584D7C0
Content-Type: text/plain;
charset="iso-8859-1"
Content-Transfer-Encoding: quoted-printable
Howdy ppls...
I have a bit more advanced question on security...
I am working on a web based portal. I need to be quite granular in my =
access levels.
There are a number of projects (increasing), a number of users =
(increasing).
On logging into the portal the user will see a list of all projects that =
he/she has access to.
When they click on the project they will get a page with a description =
on the project, plus links (depending on their access) to up to 3 other =
pages.
I have a the following tables:
PROJECTS (id, name, image, text)
USERS (id, login, pass, name, email, auth) <- note that auth here is for =
backend access only, not front end at this point intime
DOCS (id, name, project, type)
PUSERS (id, userid, projectid, access) <- this table has the access to =
projects and to links inside the project
So basically my access info is stored in the PUSERS tabel. A sample of =
data in there might be:
1000, 1006, 1000, 5 - id, JSmith, ProjectA, Finance+Construction
1001, 1006, 1001, 1 - id, JSmith, ProjectB, General
1002, 1005, 1000, 6 - id, JBrown, ProjectA, FullAccess
1003, 1007, 1002, 2 - id, CSmith, ProjectC, Design
So... the hard part... How do I get CCS to link the CCGetUser (current =
logged in user) to the PUSERS and PROJECTS database and display the =
relevant information to the user?
Any hints would be much appreciated!
Damian
------=_NextPart_000_0008_01C48572.C584D7C0
Content-Type: text/html;
charset="iso-8859-1"
Content-Transfer-Encoding: quoted-printable
<!DOCTYPE HTML PUBLIC "-//W3C//DTD HTML 4.0 Transitional//EN">
<HTML><HEAD>
<META http-equiv=3DContent-Type content=3D"text/html; =
charset=3Diso-8859-1">
<META content=3D"MSHTML 6.00.2800.1458" name=3DGENERATOR>
<STYLE></STYLE>
</HEAD>
<BODY>
<DIV><FONT face=3DArial size=3D2>Howdy ppls...</FONT></DIV>
<DIV><FONT face=3DArial size=3D2></FONT> </DIV>
<DIV><FONT face=3DArial size=3D2>I have a bit more advanced question on=20
security...</FONT></DIV>
<DIV><FONT face=3DArial size=3D2></FONT> </DIV>
<DIV><FONT face=3DArial size=3D2>I am working on a web based portal. I =
need to be=20
quite granular in my access levels.</FONT></DIV>
<DIV><FONT face=3DArial size=3D2></FONT> </DIV>
<DIV><FONT face=3DArial size=3D2>There are a number of projects =
(increasing), a=20
number of users (increasing).</FONT></DIV>
<DIV><FONT face=3DArial size=3D2></FONT> </DIV>
<DIV><FONT face=3DArial size=3D2>On logging into the portal the user =
will see a list=20
of all projects that he/she has access to.<BR>When they click on the =
project=20
they will get a page with a description on the project, plus links =
(depending on=20
their access) to up to 3 other pages.</FONT></DIV>
<DIV><FONT face=3DArial size=3D2></FONT> </DIV>
<DIV><FONT face=3DArial><FONT size=3D2>I have a the following=20
tables:<BR></FONT><FONT face=3D"Courier New" size=3D2>PROJECTS (id, =
name, image,=20
text)<BR>USERS (id, login, pass, name, email, auth) <- note that auth =
here is=20
for backend access only, not front end at this point intime<BR>DOCS (id, =
name,=20
project, type)<BR>PUSERS (id, userid, projectid, access) <- this =
table has=20
the access to projects and to links inside the =
project</FONT></FONT></DIV>
<DIV><FONT face=3DArial size=3D2></FONT> </DIV>
<DIV><FONT face=3DArial size=3D2>So basically my access info is stored =
in the PUSERS=20
tabel. A sample of data in there might be:</FONT></DIV>
<DIV><FONT face=3DArial size=3D2></FONT> </DIV>
<DIV><FONT face=3D"Courier New" size=3D2>1000, 1006, 1000, 5 - id, =
JSmith, ProjectA,=20
Finance+Construction<BR>1001, 1006, 1001, 1 - id, JSmith, ProjectB,=20
General<BR>1002, 1005, 1000, 6 - id, JBrown, ProjectA, =
FullAccess<BR>1003, 1007,=20
1002, 2 - id, CSmith, ProjectC, Design</FONT></DIV>
<DIV><FONT face=3DArial size=3D2></FONT> </DIV>
<DIV><FONT face=3DArial size=3D2><STRONG><EM>So... the hard part... How =
do I get CCS=20
to link the CCGetUser (current logged in user) to the PUSERS and =
PROJECTS=20
database and display the relevant information to the=20
user?</EM></STRONG></FONT></DIV>
<DIV><FONT face=3DArial size=3D2></FONT> </DIV>
<DIV><FONT face=3DArial size=3D2>Any hints would be much =
appreciated!</FONT></DIV>
<DIV><FONT face=3DArial size=3D2></FONT> </DIV>
<DIV><FONT face=3DArial size=3D2>Damian</FONT></DIV>
<DIV><FONT face=3DArial size=3D2></FONT> </DIV>
<DIV><FONT face=3DArial size=3D2></FONT> </DIV></BODY></HTML>
------=_NextPart_000_0008_01C48572.C584D7C0--
|
|
|
 |
Damian
|
| Posted: 08/21/2004, 12:39 AM |
|
This is a multi-part message in MIME format.
------=_NextPart_000_001E_01C487A5.69084600
Content-Type: text/plain;
charset="iso-8859-1"
Content-Transfer-Encoding: quoted-printable
Someone... anyone?
"Damian" <codecharge@sydneyit.no.com.junk> wrote in message =
news:cfvi7i$du3$1@news.codecharge.com...
Howdy ppls...
I have a bit more advanced question on security...
I am working on a web based portal. I need to be quite granular in my =
access levels.
There are a number of projects (increasing), a number of users =
(increasing).
On logging into the portal the user will see a list of all projects =
that he/she has access to.
When they click on the project they will get a page with a description =
on the project, plus links (depending on their access) to up to 3 other =
pages.
I have a the following tables:
PROJECTS (id, name, image, text)
USERS (id, login, pass, name, email, auth) <- note that auth here is =
for backend access only, not front end at this point intime
DOCS (id, name, project, type)
PUSERS (id, userid, projectid, access) <- this table has the access to =
projects and to links inside the project
So basically my access info is stored in the PUSERS tabel. A sample of =
data in there might be:
1000, 1006, 1000, 5 - id, JSmith, ProjectA, Finance+Construction
1001, 1006, 1001, 1 - id, JSmith, ProjectB, General
1002, 1005, 1000, 6 - id, JBrown, ProjectA, FullAccess
1003, 1007, 1002, 2 - id, CSmith, ProjectC, Design
So... the hard part... How do I get CCS to link the CCGetUser (current =
logged in user) to the PUSERS and PROJECTS database and display the =
relevant information to the user?
Any hints would be much appreciated!
Damian
------=_NextPart_000_001E_01C487A5.69084600
Content-Type: text/html;
charset="iso-8859-1"
Content-Transfer-Encoding: quoted-printable
<!DOCTYPE HTML PUBLIC "-//W3C//DTD HTML 4.0 Transitional//EN">
<HTML><HEAD>
<META http-equiv=3DContent-Type content=3D"text/html; =
charset=3Diso-8859-1">
<META content=3D"MSHTML 6.00.2800.1458" name=3DGENERATOR>
<STYLE></STYLE>
</HEAD>
<BODY bgColor=3D#ffffff>
<DIV><FONT face=3DArial size=3D2>Someone... anyone?</FONT></DIV>
<DIV> </DIV>
<BLOCKQUOTE dir=3Dltr=20
style=3D"PADDING-RIGHT: 0px; PADDING-LEFT: 5px; MARGIN-LEFT: 5px; =
BORDER-LEFT: #000000 2px solid; MARGIN-RIGHT: 0px">
<DIV>"Damian" <<A=20
=
href=3D"mailto:codecharge@sydneyit.no.com.junk">codecharge@sydneyit.no.co=
m.junk</A>>=20
wrote in message <A=20
=
href=3D"news:cfvi7i$du3$1@news.codecharge.com">news:cfvi7i$du3$1@news.cod=
echarge.com</A>...</DIV>
<DIV><FONT face=3DArial size=3D2>Howdy ppls...</FONT></DIV>
<DIV><FONT face=3DArial size=3D2></FONT> </DIV>
<DIV><FONT face=3DArial size=3D2>I have a bit more advanced question =
on=20
security...</FONT></DIV>
<DIV><FONT face=3DArial size=3D2></FONT> </DIV>
<DIV><FONT face=3DArial size=3D2>I am working on a web based portal. I =
need to be=20
quite granular in my access levels.</FONT></DIV>
<DIV><FONT face=3DArial size=3D2></FONT> </DIV>
<DIV><FONT face=3DArial size=3D2>There are a number of projects =
(increasing), a=20
number of users (increasing).</FONT></DIV>
<DIV><FONT face=3DArial size=3D2></FONT> </DIV>
<DIV><FONT face=3DArial size=3D2>On logging into the portal the user =
will see a=20
list of all projects that he/she has access to.<BR>When they click on =
the=20
project they will get a page with a description on the project, plus =
links=20
(depending on their access) to up to 3 other pages.</FONT></DIV>
<DIV><FONT face=3DArial size=3D2></FONT> </DIV>
<DIV><FONT face=3DArial><FONT size=3D2>I have a the following=20
tables:<BR></FONT><FONT face=3D"Courier New" size=3D2>PROJECTS (id, =
name, image,=20
text)<BR>USERS (id, login, pass, name, email, auth) <- note that =
auth here=20
is for backend access only, not front end at this point intime<BR>DOCS =
(id,=20
name, project, type)<BR>PUSERS (id, userid, projectid, access) <- =
this=20
table has the access to projects and to links inside the=20
project</FONT></FONT></DIV>
<DIV><FONT face=3DArial size=3D2></FONT> </DIV>
<DIV><FONT face=3DArial size=3D2>So basically my access info is stored =
in the=20
PUSERS tabel. A sample of data in there might be:</FONT></DIV>
<DIV><FONT face=3DArial size=3D2></FONT> </DIV>
<DIV><FONT face=3D"Courier New" size=3D2>1000, 1006, 1000, 5 - id, =
JSmith,=20
ProjectA, Finance+Construction<BR>1001, 1006, 1001, 1 - id, JSmith, =
ProjectB,=20
General<BR>1002, 1005, 1000, 6 - id, JBrown, ProjectA, =
FullAccess<BR>1003,=20
1007, 1002, 2 - id, CSmith, ProjectC, Design</FONT></DIV>
<DIV><FONT face=3DArial size=3D2></FONT> </DIV>
<DIV><FONT face=3DArial size=3D2><STRONG><EM>So... the hard part... =
How do I get=20
CCS to link the CCGetUser (current logged in user) to the PUSERS and =
PROJECTS=20
database and display the relevant information to the=20
user?</EM></STRONG></FONT></DIV>
<DIV><FONT face=3DArial size=3D2></FONT> </DIV>
<DIV><FONT face=3DArial size=3D2>Any hints would be much =
appreciated!</FONT></DIV>
<DIV><FONT face=3DArial size=3D2></FONT> </DIV>
<DIV><FONT face=3DArial size=3D2>Damian</FONT></DIV>
<DIV><FONT face=3DArial size=3D2></FONT> </DIV>
<DIV><FONT face=3DArial =
size=3D2></FONT> </DIV></BLOCKQUOTE></BODY></HTML>
------=_NextPart_000_001E_01C487A5.69084600--
|
|
|
|
Don Safar
|
| Posted: 08/21/2004, 8:25 AM |
|
This is a multi-part message in MIME format.
------=_NextPart_000_007F_01C48769.3C3F1720
Content-Type: text/plain;
charset="iso-8859-1"
Content-Transfer-Encoding: quoted-printable
In the query builder add a where param with pusers.userid as the query =
field, expression as the type and CCGetUserID() as the expression.
"Damian" <codecharge@sydneyit.no.com.junk> wrote in message =
news:cfvi7i$du3$1@news.codecharge.com...
Howdy ppls...
I have a bit more advanced question on security...
I am working on a web based portal. I need to be quite granular in my =
access levels.
There are a number of projects (increasing), a number of users =
(increasing).
On logging into the portal the user will see a list of all projects =
that he/she has access to.
When they click on the project they will get a page with a description =
on the project, plus links (depending on their access) to up to 3 other =
pages.
I have a the following tables:
PROJECTS (id, name, image, text)
USERS (id, login, pass, name, email, auth) <- note that auth here is =
for backend access only, not front end at this point intime
DOCS (id, name, project, type)
PUSERS (id, userid, projectid, access) <- this table has the access to =
projects and to links inside the project
So basically my access info is stored in the PUSERS tabel. A sample of =
data in there might be:
1000, 1006, 1000, 5 - id, JSmith, ProjectA, Finance+Construction
1001, 1006, 1001, 1 - id, JSmith, ProjectB, General
1002, 1005, 1000, 6 - id, JBrown, ProjectA, FullAccess
1003, 1007, 1002, 2 - id, CSmith, ProjectC, Design
So... the hard part... How do I get CCS to link the CCGetUser (current =
logged in user) to the PUSERS and PROJECTS database and display the =
relevant information to the user?
Any hints would be much appreciated!
Damian
------=_NextPart_000_007F_01C48769.3C3F1720
Content-Type: text/html;
charset="iso-8859-1"
Content-Transfer-Encoding: quoted-printable
<!DOCTYPE HTML PUBLIC "-//W3C//DTD HTML 4.0 Transitional//EN">
<HTML><HEAD>
<META http-equiv=3DContent-Type content=3D"text/html; =
charset=3Diso-8859-1">
<META content=3D"MSHTML 6.00.2800.1458" name=3DGENERATOR>
<STYLE></STYLE>
</HEAD>
<BODY bgColor=3D#ffffff>
<DIV><FONT face=3DArial size=3D2>In the query builder add a where param =
with=20
pusers.userid as the query field, expression as the type and =
CCGetUserID() as=20
the expression.</FONT></DIV>
<BLOCKQUOTE dir=3Dltr=20
style=3D"PADDING-RIGHT: 0px; PADDING-LEFT: 5px; MARGIN-LEFT: 5px; =
BORDER-LEFT: #000000 2px solid; MARGIN-RIGHT: 0px">
<DIV>"Damian" <<A=20
=
href=3D"mailto:codecharge@sydneyit.no.com.junk">codecharge@sydneyit.no.co=
m.junk</A>>=20
wrote in message <A=20
=
href=3D"news:cfvi7i$du3$1@news.codecharge.com">news:cfvi7i$du3$1@news.cod=
echarge.com</A>...</DIV>
<DIV><FONT face=3DArial size=3D2>Howdy ppls...</FONT></DIV>
<DIV><FONT face=3DArial size=3D2></FONT> </DIV>
<DIV><FONT face=3DArial size=3D2>I have a bit more advanced question =
on=20
security...</FONT></DIV>
<DIV><FONT face=3DArial size=3D2></FONT> </DIV>
<DIV><FONT face=3DArial size=3D2>I am working on a web based portal. I =
need to be=20
quite granular in my access levels.</FONT></DIV>
<DIV><FONT face=3DArial size=3D2></FONT> </DIV>
<DIV><FONT face=3DArial size=3D2>There are a number of projects =
(increasing), a=20
number of users (increasing).</FONT></DIV>
<DIV><FONT face=3DArial size=3D2></FONT> </DIV>
<DIV><FONT face=3DArial size=3D2>On logging into the portal the user =
will see a=20
list of all projects that he/she has access to.<BR>When they click on =
the=20
project they will get a page with a description on the project, plus =
links=20
(depending on their access) to up to 3 other pages.</FONT></DIV>
<DIV><FONT face=3DArial size=3D2></FONT> </DIV>
<DIV><FONT face=3DArial><FONT size=3D2>I have a the following=20
tables:<BR></FONT><FONT face=3D"Courier New" size=3D2>PROJECTS (id, =
name, image,=20
text)<BR>USERS (id, login, pass, name, email, auth) <- note that =
auth here=20
is for backend access only, not front end at this point intime<BR>DOCS =
(id,=20
name, project, type)<BR>PUSERS (id, userid, projectid, access) <- =
this=20
table has the access to projects and to links inside the=20
project</FONT></FONT></DIV>
<DIV><FONT face=3DArial size=3D2></FONT> </DIV>
<DIV><FONT face=3DArial size=3D2>So basically my access info is stored =
in the=20
PUSERS tabel. A sample of data in there might be:</FONT></DIV>
<DIV><FONT face=3DArial size=3D2></FONT> </DIV>
<DIV><FONT face=3D"Courier New" size=3D2>1000, 1006, 1000, 5 - id, =
JSmith,=20
ProjectA, Finance+Construction<BR>1001, 1006, 1001, 1 - id, JSmith, =
ProjectB,=20
General<BR>1002, 1005, 1000, 6 - id, JBrown, ProjectA, =
FullAccess<BR>1003,=20
1007, 1002, 2 - id, CSmith, ProjectC, Design</FONT></DIV>
<DIV><FONT face=3DArial size=3D2></FONT> </DIV>
<DIV><FONT face=3DArial size=3D2><STRONG><EM>So... the hard part... =
How do I get=20
CCS to link the CCGetUser (current logged in user) to the PUSERS and =
PROJECTS=20
database and display the relevant information to the=20
user?</EM></STRONG></FONT></DIV>
<DIV><FONT face=3DArial size=3D2></FONT> </DIV>
<DIV><FONT face=3DArial size=3D2>Any hints would be much =
appreciated!</FONT></DIV>
<DIV><FONT face=3DArial size=3D2></FONT> </DIV>
<DIV><FONT face=3DArial size=3D2>Damian</FONT></DIV>
<DIV><FONT face=3DArial size=3D2></FONT> </DIV>
<DIV><FONT face=3DArial =
size=3D2></FONT> </DIV></BLOCKQUOTE></BODY></HTML>
------=_NextPart_000_007F_01C48769.3C3F1720--
|
|
|
|
Damian
|
| Posted: 08/22/2004, 4:31 AM |
|
Thanks Don - Only took me about 2 hours of different variations before
I -really- read your email and its now working, well a variation is, Im
about to try the scenario below now :)
"Don Safar" <donsafar@hotmail.com> wrote in message
news:cg7phv$7vr$1@news.codecharge.com...
In the query builder add a where param with pusers.userid as the query
field, expression as the type and CCGetUserID() as the expression.
"Damian" <codecharge@sydneyit.no.com.junk> wrote in message
news:cfvi7i$du3$1@news.codecharge.com...
Howdy ppls...
I have a bit more advanced question on security...
I am working on a web based portal. I need to be quite granular in my access
levels.
There are a number of projects (increasing), a number of users (increasing).
On logging into the portal the user will see a list of all projects that
he/she has access to.
When they click on the project they will get a page with a description on
the project, plus links (depending on their access) to up to 3 other pages.
I have a the following tables:
PROJECTS (id, name, image, text)
USERS (id, login, pass, name, email, auth) <- note that auth here is for
backend access only, not front end at this point intime
DOCS (id, name, project, type)
PUSERS (id, userid, projectid, access) <- this table has the access to
projects and to links inside the project
So basically my access info is stored in the PUSERS tabel. A sample of data
in there might be:
1000, 1006, 1000, 5 - id, JSmith, ProjectA, Finance+Construction
1001, 1006, 1001, 1 - id, JSmith, ProjectB, General
1002, 1005, 1000, 6 - id, JBrown, ProjectA, FullAccess
1003, 1007, 1002, 2 - id, CSmith, ProjectC, Design
So... the hard part... How do I get CCS to link the CCGetUser (current
logged in user) to the PUSERS and PROJECTS database and display the relevant
information to the user?
Any hints would be much appreciated!
Damian
|
|
|
|
|
