dportik
Posts: 1
|
| Posted: 01/06/2006, 5:53 AM |
|
I have a table called past_week with the following fields:
PW1(ID), Task Date, Emp Name, Project Name, StatusName, Task Description, Comments .
I want the people to only be able to update/delete/add their own records. Can someone please tell me the easiest way to do this?
I can't seem to get it to work.
Please help!!!!!
|
 |
 |
Benjamin Krajmalnik
|
| Posted: 01/06/2006, 7:53 AM |
|
In both the Grid and the Update form add a where statement which filters by
the field which identifies the person.
This way, on the grid they will only see their own records, and if they try
to hack a URL to retrieve another record, it will not be retrieved because
of the underlying check for the employee identifier.
For security reasons, I would place the employee identifier in a session
variable and not pass it through the URL, because then it can be hacked.
"dportik" <dportik@forum.codecharge> wrote in message
news:643be7669d759b@news.codecharge.com...
> I have a table called past_week with the following fields:
> PW1(ID), Task Date, Emp Name, Project Name, StatusName, Task
> Description, Comments .
>
> I want the people to only be able to update/delete/add their own records.
Can
> someone please tell me the easiest way to do this?
> I can't seem to get it to work.
> Please help!!!!!
> ---------------------------------------
> Sent from YesSoftware forum
> http://forums.codecharge.com/
>
|
|
|
|
|
