CodeCharge Studio
search Register Login  

Visual Web Reporting

Visually create Web Reports in PHP, ASP, .NET, Java, Perl and ColdFusion.
CodeCharge.com

YesSoftware Forums -> Archive -> CodeCharge.Discussion

 Security question

Print topic Send  topic

Author Message
Christian Hamel
Posted: 08/23/2001, 5:03 AM

Hello.
Just want to have some information regarding the security in CC.

After the user has logged in, I'm displaying the Search form and a grid of
all my employees. I want my user with a security level of 1 to be able to
search, click on the record that the search return to see every field of
that employee because on the list I'm displaying I show only a few major
field. BUT I do not want this user (security level 1) to be able to
modify/insert records.. Security level 2 or 3 is required to be able to
insert or modify records. Is there any simple way ?

Thank you.

Regards,
Christian

Alexey Alexapolsky
Posted: 08/23/2001, 6:15 AM

Yes , the page that shows Grid - must have security level = 1 ,
and pages that contain Record Forms must have security level = 2
So , even if user click insert link under the grid he will not be
able to go to the next record page.

--
Alex



Christian Hamel <chamel@technilab.NOSPAM.ca> wrote in message
news:9m2res$22i$1@news.codecharge.com...
> Hello.
> Just want to have some information regarding the security in CC.
>
> After the user has logged in, I'm displaying the Search form and a grid of
> all my employees. I want my user with a security level of 1 to be able to
> search, click on the record that the search return to see every field of
> that employee because on the list I'm displaying I show only a few major
> field. BUT I do not want this user (security level 1) to be able to
> modify/insert records.. Security level 2 or 3 is required to be able to
> insert or modify records. Is there any simple way ?
>
> Thank you.
>
> Regards,
> Christian
>
>

Christian Hamel
Posted: 08/23/2001, 6:33 AM

But I want the user having security level 1 to be able to access the record
form to see EVERY field since I'm only displaying a few of them in the
grid..


"Alexey Alexapolsky" <alexa@codecharge.com> a écrit dans le messagenews:
9m2vm9$a1l$1@news.codecharge.com
...
> Yes , the page that shows Grid - must have security level = 1 ,
> and pages that contain Record Forms must have security level = 2
> So , even if user click insert link under the grid he will not be
> able to go to the next record page.
>
> --
> Alex
>
>
>
> Christian Hamel <chamel@technilab.NOSPAM.ca> wrote in message
>news:9m2res$22i$1@news.codecharge.com...
> > Hello.
> > Just want to have some information regarding the security in CC.
> >
> > After the user has logged in, I'm displaying the Search form and a grid
of
> > all my employees. I want my user with a security level of 1 to be able
to
> > search, click on the record that the search return to see every field of
> > that employee because on the list I'm displaying I show only a few major
> > field. BUT I do not want this user (security level 1) to be able to
> > modify/insert records.. Security level 2 or 3 is required to be able to
> > insert or modify records. Is there any simple way ?
> >
> > Thank you.
> >
> > Regards,
> > Christian
> >
> >
>
>

David A. Lee
Posted: 08/23/2001, 8:55 AM

Although it takes more work, I have found that making seperate
"administrator" pages and "visitor" pages works very well.
In CodeCharge its so easy to make new forms that I found its usually
easier to use entirely different forms for people with different security
levels.
That way you dont have to muck with a bunch of complicated event code
to hide/display fields (like "Salary") and make fields editable
for some people and labels for other ...





> But I want the user having security level 1 to be able to access the
record
> form to see EVERY field since I'm only displaying a few of them in the
> grid..
>
>
> "Alexey Alexapolsky" <alexa@codecharge.com> a écrit dans le messagenews:
> 9m2vm9$a1l$1@news.codecharge.com
...
> > Yes , the page that shows Grid - must have security level = 1 ,
> > and pages that contain Record Forms must have security level = 2
> > So , even if user click insert link under the grid he will not be
> > able to go to the next record page.
> >
> > --
> > Alex
> >
> >
> >
> > Christian Hamel <chamel@technilab.NOSPAM.ca> wrote in message
> >news:9m2res$22i$1@news.codecharge.com...
> > > Hello.
> > > Just want to have some information regarding the security in CC.
> > >
> > > After the user has logged in, I'm displaying the Search form and a
grid
> of
> > > all my employees. I want my user with a security level of 1 to be
able
> to
> > > search, click on the record that the search return to see every field
of
> > > that employee because on the list I'm displaying I show only a few
major
> > > field. BUT I do not want this user (security level 1) to be able to
> > > modify/insert records.. Security level 2 or 3 is required to be able
to
> > > insert or modify records. Is there any simple way ?
> > >
> > > Thank you.
> > >
> > > Regards,
> > > Christian
> > >
> > >
> >
> >
>
>

Jason Charette
Posted: 08/23/2001, 9:21 AM

Actually, what would be nice (future feature?), is being able to control,
without any customization, security on a form basis, as well as on, or in
replacement, of page level security...

IMHO.

Jason


"David A. Lee" <dave@calldei.com> wrote in message
news:9m390r$re9$1@news.codecharge.com...
> Although it takes more work, I have found that making seperate
> "administrator" pages and "visitor" pages works very well.
> In CodeCharge its so easy to make new forms that I found its usually
> easier to use entirely different forms for people with different security
> levels.
> That way you dont have to muck with a bunch of complicated event code
> to hide/display fields (like "Salary") and make fields editable
> for some people and labels for other ...
>
>
>
>
>
> > But I want the user having security level 1 to be able to access the
> record
> > form to see EVERY field since I'm only displaying a few of them in the
> > grid..
> >
> >
> > "Alexey Alexapolsky" <alexa@codecharge.com> a écrit dans le message
news:
> > 9m2vm9$a1l$1@news.codecharge.com
...
> > > Yes , the page that shows Grid - must have security level = 1 ,
> > > and pages that contain Record Forms must have security level = 2
> > > So , even if user click insert link under the grid he will not be
> > > able to go to the next record page.
> > >
> > > --
> > > Alex
> > >
> > >
> > >
> > > Christian Hamel <chamel@technilab.NOSPAM.ca> wrote in message
> > >news:9m2res$22i$1@news.codecharge.com...
> > > > Hello.
> > > > Just want to have some information regarding the security in CC.
> > > >
> > > > After the user has logged in, I'm displaying the Search form and a
> grid
> > of
> > > > all my employees. I want my user with a security level of 1 to be
> able
> > to
> > > > search, click on the record that the search return to see every
field
> of
> > > > that employee because on the list I'm displaying I show only a few
> major
> > > > field. BUT I do not want this user (security level 1) to be able to
> > > > modify/insert records.. Security level 2 or 3 is required to be
able
> to
> > > > insert or modify records. Is there any simple way ?
> > > >
> > > > Thank you.
> > > >
> > > > Regards,
> > > > Christian
> > > >
> > > >
> > >
> > >
> >
> >
>
>

Christian Hamel
Posted: 08/23/2001, 10:06 AM

Sounds good to me but how can I call a different form based on the login ?

"David A. Lee" <dave@calldei.com> a écrit dans le messagenews:
9m390r$re9$1@news.codecharge.com
...
> Although it takes more work, I have found that making seperate
> "administrator" pages and "visitor" pages works very well.
> In CodeCharge its so easy to make new forms that I found its usually
> easier to use entirely different forms for people with different security
> levels.
> That way you dont have to muck with a bunch of complicated event code
> to hide/display fields (like "Salary") and make fields editable
> for some people and labels for other ...
>
>
>
>
>
> > But I want the user having security level 1 to be able to access the
> record
> > form to see EVERY field since I'm only displaying a few of them in the
> > grid..
> >
> >
> > "Alexey Alexapolsky" <alexa@codecharge.com> a écrit dans le message
news:
> > 9m2vm9$a1l$1@news.codecharge.com
...
> > > Yes , the page that shows Grid - must have security level = 1 ,
> > > and pages that contain Record Forms must have security level = 2
> > > So , even if user click insert link under the grid he will not be
> > > able to go to the next record page.
> > >
> > > --
> > > Alex
> > >
> > >
> > >
> > > Christian Hamel <chamel@technilab.NOSPAM.ca> wrote in message
> > >news:9m2res$22i$1@news.codecharge.com...
> > > > Hello.
> > > > Just want to have some information regarding the security in CC.
> > > >
> > > > After the user has logged in, I'm displaying the Search form and a
> grid
> > of
> > > > all my employees. I want my user with a security level of 1 to be
> able
> > to
> > > > search, click on the record that the search return to see every
field
> of
> > > > that employee because on the list I'm displaying I show only a few
> major
> > > > field. BUT I do not want this user (security level 1) to be able to
> > > > modify/insert records.. Security level 2 or 3 is required to be
able
> to
> > > > insert or modify records. Is there any simple way ?
> > > >
> > > > Thank you.
> > > >
> > > > Regards,
> > > > Christian
> > > >
> > > >
> > >
> > >
> >
> >
>
>

David A. Lee
Posted: 08/23/2001, 11:21 AM

The easiest way is simply give different types of users different
initial pages to start with !

Say, have 'normal' users start with

/normalUsers.cgi

and 'Administraters' start with
/adminUsers.cgi


If you set the security level right then normal users can access the
adminUsers
pages even if they try.

But if you want to be fancy you can use events in the login page ...




> Sounds good to me but how can I call a different form based on the login ?
>
> "David A. Lee" <dave@calldei.com> a écrit dans le messagenews:
> 9m390r$re9$1@news.codecharge.com
...
> > Although it takes more work, I have found that making seperate
> > "administrator" pages and "visitor" pages works very well.
> > In CodeCharge its so easy to make new forms that I found its usually
> > easier to use entirely different forms for people with different
security
> > levels.
> > That way you dont have to muck with a bunch of complicated event code
> > to hide/display fields (like "Salary") and make fields editable
> > for some people and labels for other ...
> >
> >
> >
> >
> >
> > > But I want the user having security level 1 to be able to access the
> > record
> > > form to see EVERY field since I'm only displaying a few of them in the
> > > grid..
> > >
> > >
> > > "Alexey Alexapolsky" <alexa@codecharge.com> a écrit dans le message
>news:
> > > 9m2vm9$a1l$1@news.codecharge.com
...
> > > > Yes , the page that shows Grid - must have security level = 1 ,
> > > > and pages that contain Record Forms must have security level = 2
> > > > So , even if user click insert link under the grid he will not be
> > > > able to go to the next record page.
> > > >
> > > > --
> > > > Alex
> > > >
> > > >
> > > >
> > > > Christian Hamel <chamel@technilab.NOSPAM.ca> wrote in message
> > > >news:9m2res$22i$1@news.codecharge.com...
> > > > > Hello.
> > > > > Just want to have some information regarding the security in CC.
> > > > >
> > > > > After the user has logged in, I'm displaying the Search form and a
> > grid
> > > of
> > > > > all my employees. I want my user with a security level of 1 to be
> > able
> > > to
> > > > > search, click on the record that the search return to see every
> field
> > of
> > > > > that employee because on the list I'm displaying I show only a few
> > major
> > > > > field. BUT I do not want this user (security level 1) to be able
to
> > > > > modify/insert records.. Security level 2 or 3 is required to be
> able
> > to
> > > > > insert or modify records. Is there any simple way ?
> > > > >
> > > > > Thank you.
> > > > >
> > > > > Regards,
> > > > > Christian
> > > > >
> > > > >
> > > >
> > > >
> > >
> > >
> >
> >
>
>

Christian Hamel
Posted: 08/23/2001, 11:28 AM

Unfortunately, I'm dealing with ASP and no cgi, any idea how can I do this ?


"David A. Lee" <dave@calldei.com> a écrit dans le messagenews:
9m3hii$aq9$1@news.codecharge.com
...
> The easiest way is simply give different types of users different
> initial pages to start with !
>
> Say, have 'normal' users start with
>
> /normalUsers.cgi
>
> and 'Administraters' start with
> /adminUsers.cgi
>
>
> If you set the security level right then normal users can access the
> adminUsers
> pages even if they try.
>
> But if you want to be fancy you can use events in the login page ...
>
>
>
>
> > Sounds good to me but how can I call a different form based on the login
?
> >
> > "David A. Lee" <dave@calldei.com> a écrit dans le messagenews:
> > 9m390r$re9$1@news.codecharge.com
...
> > > Although it takes more work, I have found that making seperate
> > > "administrator" pages and "visitor" pages works very well.
> > > In CodeCharge its so easy to make new forms that I found its usually
> > > easier to use entirely different forms for people with different
> security
> > > levels.
> > > That way you dont have to muck with a bunch of complicated event code
> > > to hide/display fields (like "Salary") and make fields editable
> > > for some people and labels for other ...
> > >
> > >
> > >
> > >
> > >
> > > > But I want the user having security level 1 to be able to access the
> > > record
> > > > form to see EVERY field since I'm only displaying a few of them in
the
> > > > grid..
> > > >
> > > >
> > > > "Alexey Alexapolsky" <alexa@codecharge.com> a écrit dans le message
> >news:
> > > > 9m2vm9$a1l$1@news.codecharge.com
...
> > > > > Yes , the page that shows Grid - must have security level = 1 ,
> > > > > and pages that contain Record Forms must have security level = 2
> > > > > So , even if user click insert link under the grid he will not be
> > > > > able to go to the next record page.
> > > > >
> > > > > --
> > > > > Alex
> > > > >
> > > > >
> > > > >
> > > > > Christian Hamel <chamel@technilab.NOSPAM.ca> wrote in message
> > > > >news:9m2res$22i$1@news.codecharge.com...
> > > > > > Hello.
> > > > > > Just want to have some information regarding the security in
CC.
> > > > > >
> > > > > > After the user has logged in, I'm displaying the Search form and
a
> > > grid
> > > > of
> > > > > > all my employees. I want my user with a security level of 1 to
be
> > > able
> > > > to
> > > > > > search, click on the record that the search return to see every
> > field
> > > of
> > > > > > that employee because on the list I'm displaying I show only a
few
> > > major
> > > > > > field. BUT I do not want this user (security level 1) to be
able
> to
> > > > > > modify/insert records.. Security level 2 or 3 is required to be
> > able
> > > to
> > > > > > insert or modify records. Is there any simple way ?
> > > > > >
> > > > > > Thank you.
> > > > > >
> > > > > > Regards,
> > > > > > Christian
> > > > > >
> > > > > >
> > > > >
> > > > >
> > > >
> > > >
> > >
> > >
> >
> >
>
>

David A. Lee
Posted: 08/23/2001, 11:42 AM

Replace the string ".cgi" with ".asp"
Exactly the same thing


> Unfortunately, I'm dealing with ASP and no cgi, any idea how can I do this
?
>
>
> "David A. Lee" <dave@calldei.com> a écrit dans le messagenews:
> 9m3hii$aq9$1@news.codecharge.com
...
> > The easiest way is simply give different types of users different
> > initial pages to start with !
> >
> > Say, have 'normal' users start with
> >
> > /normalUsers.cgi
> >
> > and 'Administraters' start with
> > /adminUsers.cgi
> >
> >
> > If you set the security level right then normal users can access the
> > adminUsers
> > pages even if they try.
> >
> > But if you want to be fancy you can use events in the login page ...
> >
> >
> >
> >
> > > Sounds good to me but how can I call a different form based on the
login
> ?
> > >
> > > "David A. Lee" <dave@calldei.com> a écrit dans le messagenews:
> > > 9m390r$re9$1@news.codecharge.com
...
> > > > Although it takes more work, I have found that making seperate
> > > > "administrator" pages and "visitor" pages works very well.
> > > > In CodeCharge its so easy to make new forms that I found its usually
> > > > easier to use entirely different forms for people with different
> > security
> > > > levels.
> > > > That way you dont have to muck with a bunch of complicated event
code
> > > > to hide/display fields (like "Salary") and make fields editable
> > > > for some people and labels for other ...
> > > >
> > > >
> > > >
> > > >
> > > >
> > > > > But I want the user having security level 1 to be able to access
the
> > > > record
> > > > > form to see EVERY field since I'm only displaying a few of them in
> the
> > > > > grid..
> > > > >
> > > > >
> > > > > "Alexey Alexapolsky" <alexa@codecharge.com> a écrit dans le
message
> > >news:
> > > > > 9m2vm9$a1l$1@news.codecharge.com
...
> > > > > > Yes , the page that shows Grid - must have security level = 1 ,
> > > > > > and pages that contain Record Forms must have security level = 2
> > > > > > So , even if user click insert link under the grid he will not
be
> > > > > > able to go to the next record page.
> > > > > >
> > > > > > --
> > > > > > Alex
> > > > > >
> > > > > >
> > > > > >
> > > > > > Christian Hamel <chamel@technilab.NOSPAM.ca> wrote in message
> > > > > >news:9m2res$22i$1@news.codecharge.com...
> > > > > > > Hello.
> > > > > > > Just want to have some information regarding the security in
> CC.
> > > > > > >
> > > > > > > After the user has logged in, I'm displaying the Search form
and
> a
> > > > grid
> > > > > of
> > > > > > > all my employees. I want my user with a security level of 1
to
> be
> > > > able
> > > > > to
> > > > > > > search, click on the record that the search return to see
every
> > > field
> > > > of
> > > > > > > that employee because on the list I'm displaying I show only a
> few
> > > > major
> > > > > > > field. BUT I do not want this user (security level 1) to be
> able
> > to
> > > > > > > modify/insert records.. Security level 2 or 3 is required to
be
> > > able
> > > > to
> > > > > > > insert or modify records. Is there any simple way ?
> > > > > > >
> > > > > > > Thank you.
> > > > > > >
> > > > > > > Regards,
> > > > > > > Christian
> > > > > > >
> > > > > > >
> > > > > >
> > > > > >
> > > > >
> > > > >
> > > >
> > > >
> > >
> > >
> >
> >
>
>

Christian Hamel
Posted: 08/23/2001, 12:19 PM

Sigh... I feel like a stupid guy... Thanks, I will definitely use your
solution.


"David A. Lee" <dave@calldei.com> a écrit dans le messagenews:
9m3ir0$ctk$1@news.codecharge.com
...
> Replace the string ".cgi" with ".asp"
> Exactly the same thing
>
>
> > Unfortunately, I'm dealing with ASP and no cgi, any idea how can I do
this
> ?
> >
> >
> > "David A. Lee" <dave@calldei.com> a écrit dans le messagenews:
> > 9m3hii$aq9$1@news.codecharge.com
...
> > > The easiest way is simply give different types of users different
> > > initial pages to start with !
> > >
> > > Say, have 'normal' users start with
> > >
> > > /normalUsers.cgi
> > >
> > > and 'Administraters' start with
> > > /adminUsers.cgi
> > >
> > >
> > > If you set the security level right then normal users can access the
> > > adminUsers
> > > pages even if they try.
> > >
> > > But if you want to be fancy you can use events in the login page ...
> > >
> > >
> > >
> > >
> > > > Sounds good to me but how can I call a different form based on the
> login
> > ?
> > > >
> > > > "David A. Lee" <dave@calldei.com> a écrit dans le messagenews:
> > > > 9m390r$re9$1@news.codecharge.com
...
> > > > > Although it takes more work, I have found that making seperate
> > > > > "administrator" pages and "visitor" pages works very well.
> > > > > In CodeCharge its so easy to make new forms that I found its
usually
> > > > > easier to use entirely different forms for people with different
> > > security
> > > > > levels.
> > > > > That way you dont have to muck with a bunch of complicated event
> code
> > > > > to hide/display fields (like "Salary") and make fields editable
> > > > > for some people and labels for other ...
> > > > >
> > > > >
> > > > >
> > > > >
> > > > >
> > > > > > But I want the user having security level 1 to be able to access
> the
> > > > > record
> > > > > > form to see EVERY field since I'm only displaying a few of them
in
> > the
> > > > > > grid..
> > > > > >
> > > > > >
> > > > > > "Alexey Alexapolsky" <alexa@codecharge.com> a écrit dans le
> message
> > > >news:
> > > > > > 9m2vm9$a1l$1@news.codecharge.com
...
> > > > > > > Yes , the page that shows Grid - must have security level = 1
,
> > > > > > > and pages that contain Record Forms must have security level =
2
> > > > > > > So , even if user click insert link under the grid he will not
> be
> > > > > > > able to go to the next record page.
> > > > > > >
> > > > > > > --
> > > > > > > Alex
> > > > > > >
> > > > > > >
> > > > > > >
> > > > > > > Christian Hamel <chamel@technilab.NOSPAM.ca> wrote in message
> > > > > > >news:9m2res$22i$1@news.codecharge.com...
> > > > > > > > Hello.
> > > > > > > > Just want to have some information regarding the security
in
> > CC.
> > > > > > > >
> > > > > > > > After the user has logged in, I'm displaying the Search form
> and
> > a
> > > > > grid
> > > > > > of
> > > > > > > > all my employees. I want my user with a security level of 1
> to
> > be
> > > > > able
> > > > > > to
> > > > > > > > search, click on the record that the search return to see
> every
> > > > field
> > > > > of
> > > > > > > > that employee because on the list I'm displaying I show only
a
> > few
> > > > > major
> > > > > > > > field. BUT I do not want this user (security level 1) to be
> > able
> > > to
> > > > > > > > modify/insert records.. Security level 2 or 3 is required
to
> be
> > > > able
> > > > > to
> > > > > > > > insert or modify records. Is there any simple way ?
> > > > > > > >
> > > > > > > > Thank you.
> > > > > > > >
> > > > > > > > Regards,
> > > > > > > > Christian
> > > > > > > >
> > > > > > > >
> > > > > > >
> > > > > > >
> > > > > >
> > > > > >
> > > > >
> > > > >
> > > >
> > > >
> > >
> > >
> >
> >
>
>

Alexey Alexapolsky
Posted: 08/24/2001, 5:57 AM

Hmm .. I guess this discussion would've been half as less
if you had read article about field level security in CC at gotocode.com
site , section "Tips and Articles"

--
Alex


Christian Hamel <chamel@technilab.NOSPAM.ca> wrote in message
news:9m2res$22i$1@news.codecharge.com...
> Hello.
> Just want to have some information regarding the security in CC.
>
> After the user has logged in, I'm displaying the Search form and a grid of
> all my employees. I want my user with a security level of 1 to be able to
> search, click on the record that the search return to see every field of
> that employee because on the list I'm displaying I show only a few major
> field. BUT I do not want this user (security level 1) to be able to
> modify/insert records.. Security level 2 or 3 is required to be able to
> insert or modify records. Is there any simple way ?
>
> Thank you.
>
> Regards,
> Christian
>
>


   


These are Community Forums for users to exchange information.
If you would like to obtain technical product help please visit http://support.yessoftware.com.

PHP Reports

Visually create Web Reports in PHP, ASP, .NET, Java, Perl and ColdFusion.
CodeCharge.com

Home   |    Search   |    Members   |    Register   |    Login


Powered by UltraApps Forum created with CodeCharge Studio
Copyright © 2003-2004 by UltraApps.com  and YesSoftware, Inc.