Paul
|
| Posted: 12/13/2002, 4:53 AM |
|
Hi There
I've got a problem which was somewhat covered by Ron Borkent:
http://gotocode.com/disc_viewt.asp?mid=6082&s_topic=login&
I am however not sure whether it cures the problem I have and maybe Ron or someone else can help me out.
If a person logs in on one Site ie. Department A with access level 2, he gets access to Department B with Access level 2. With the suggestion of Ron, I think the person still gets access to Department A website AND Department B website if he KEEPS his browser OPEN and opens the website of Departmet B. He then gets access to Department B with the same level he got when logging in on the Department B website.
Am I confused or will the suggestion of Ron really help?
Or is there a better/easier method?
Can this method also be used to allow users to only edit specific records?
IOW, One user enter a record, give another user the correct password and then that user can also edit that specific record. So every record gets a password?
regards
paul
|
|
|
 |
Timmy
|
| Posted: 12/13/2002, 9:35 AM |
|
The Login and security mechanism mainly revolves around the Login function in the Login page and the CheckSecurity() function in the common.asp file. You can write a custom Login event in the Login form and set custom names for the session variables for each site e.g. departmantAUserID, departmentBUserID, etc. Then you can change the checksecurity function to check to the custom session variable instead of the generic UserID.
|
|
|
|
Paul
|
| Posted: 12/13/2002, 11:50 AM |
|
Hi Timmy
Thanks , I'll try it this way.
regards
Paul
Quote from Timmy:
The Login and security mechanism mainly revolves around the Login function in the Login page and the CheckSecurity() function in the common.asp file. You can write a custom Login event in the Login form and set custom names for the session variables for each site e.g. departmantAUserID, departmentBUserID, etc. Then you can change the checksecurity function to check to the custom session variable instead of the generic UserID.
|
|
|
|
|
