Roles-Based Security - Revision history

Wayneh at 02:46, 12 April 2012

2012-04-12T02:46:30Z

← Older revision		Revision as of 02:46, 12 April 2012
Line 343:		Line 343:
	and add -		and add -
	<syntaxhighlight lang="php">		<syntaxhighlight lang="php">
			// 0 => ignore restriction
			// >0 => implement restriction
			// Special characters are !@#$%^&*()-+_=[]{}\\|;:'\",.<>/?

	$config_password_restrictions = array(		$config_password_restrictions = array(
	"minsize" => 6,		"minsize" => 6,

2011-07-24T22:19:22Z

← Older revision		Revision as of 22:19, 24 July 2011
Line 329:		Line 329:
	The DB tables are updated accordingly.		The DB tables are updated accordingly.

	=Password Content Restrictions=		=NOTE re Password Content Restrictions=

	Replace -		Replace -
Line 383:		Line 383:
	http://forum.achievo.org/viewtopic.php?f=5&t=16251&start=0&hilit=register+tab		http://forum.achievo.org/viewtopic.php?f=5&t=16251&start=0&hilit=register+tab

	= checktabrights (in atknode) ~~BUG~~ =		= NOTE re BUG checktabrights (in atknode) =
	This function has a bug which stops it working so only the $this>allowed functionality above works		This function has a bug which stops it working so only the $this->allowed functionality above works
	However if you patch checktabrights (see BUGZILLA http://bugzilla.achievo.org/show_bug.cgi?id=1708 ) all is OK		However if you patch checktabrights (see BUGZILLA http://bugzilla.achievo.org/show_bug.cgi?id=1708 ) all is OK

	=~~auth_grantall_privilege~~=		= NOTE reauth_grantall_privilege=

	If a user has the grantall privilege, he can grant other users all privileges; even privileges he does not have himself.		If a user has the grantall privilege, he can grant other users all privileges; even privileges he does not have himself.

2011-07-24T22:17:04Z

@@ Line 328: / Line 328: @@
 Now you can login to the application and review the screens that atk generates for you. First add 2 new profiles. Than add a new user. After that edit the user, and you can see that a new control is added, allowing you to assign 1 or both profiles for the user.
 The DB tables are updated accordingly.
 =NOTE re Controlling Access to Tabs=

2011-07-19T04:36:03Z

← Older revision		Revision as of 04:36, 19 July 2011
Line 1:		Line 1:
	{{Howto\|Intermediate\|--[[User:Rwolverine\|Rwolverine]] 14:18, 7 December 2007 (CET)}}		{{Howto\|Intermediate\|--[[User:Rwolverine\|Rwolverine]] 14:18, 7 December 2007 (CET) / Notes added 2011 by wayneh}}

	How to Define Role-Based Security using the ATK.		How to Define Role-Based Security using the ATK.

2011-07-19T04:32:36Z

NOTE re Controlling Access to Tabs

@@ Line 349: / Line 349: @@
 </syntaxhighlight>
-Not that the "allowed" parameter is tab_ followed by the tab name and is case sensitive
+Note that the "allowed" parameter is tab_ followed by the tab name and is case sensitive
 so could be "tab_Details", "tab_Addresses" or "tab_PhoneNos" to match the registerNode entry above
@@ Line 355: / Line 355: @@
 http://forum.achievo.org/viewtopic.php?f=5&t=16251&start=0&hilit=register+tab
-Wayne H Nov 2009 / updated May 2011
+= checktabrights (in atknode) BUG =

2011-05-27T00:22:50Z

← Older revision		Revision as of 00:22, 27 May 2011
Line 340:		Line 340:

	where Details, Addresses and PhoneNos are tab names		where Details, Addresses and PhoneNos are tab names

			Then use statements like
			<syntaxhighlight lang="php">
			if($this-allowed("tab_tab_name")
			{
			.. what to do if allowed - eg add attributes for this tab
			}
			</syntaxhighlight>

			Not that the "allowed" parameter is tab_ followed by the tab name and is case sensitive
			so could be "tab_Details", "tab_Addresses" or "tab_PhoneNos" to match the registerNode entry above

	Sourced from Achievo dev forum		Sourced from Achievo dev forum
	http://forum.achievo.org/viewtopic.php?f=5&t=16251&start=0&hilit=register+tab		http://forum.achievo.org/viewtopic.php?f=5&t=16251&start=0&hilit=register+tab

	Wayne H Nov 2009		Wayne H Nov 2009 / updated May 2011

2009-11-09T20:42:16Z

← Older revision		Revision as of 20:42, 9 November 2009
Line 328:		Line 328:
	Now you can login to the application and review the screens that atk generates for you. First add 2 new profiles. Than add a new user. After that edit the user, and you can see that a new control is added, allowing you to assign 1 or both profiles for the user.		Now you can login to the application and review the screens that atk generates for you. First add 2 new profiles. Than add a new user. After that edit the user, and you can see that a new control is added, allowing you to assign 1 or both profiles for the user.
	The DB tables are updated accordingly.		The DB tables are updated accordingly.

			=NOTE re Controlling Access to Tabs=

			By registering Tab names in registerNode() atkProfileAttribute knows about them and access to the tabs can be turned on/off from the same screen as turning access on/off to admin/add/edit/delete for the node

			eg

			<syntaxhighlight lang="php">
			registerNode("customer.customer",array("admin","add","edit","delete"),array("Details","Addresses","PhoneNos"))
			</syntaxhighlight>

			where Details, Addresses and PhoneNos are tab names

			Sourced from Achievo dev forum
			http://forum.achievo.org/viewtopic.php?f=5&t=16251&start=0&hilit=register+tab

			Wayne H Nov 2009

2009-06-26T14:33:24Z

← Older revision		Revision as of 14:33, 26 June 2009
Line 320:		Line 320:
	</syntaxhighlight>		</syntaxhighlight>
	With these 3 new lines we are telling atk to look for the profile information for each user in the “userprofile” table, while also mentioning the names of the fields in this table.		With these 3 new lines we are telling atk to look for the profile information for each user in the “userprofile” table, while also mentioning the names of the fields in this table.

			=Notes for Oracle users=
			Oracle users should name the "user" table "users" "access" table "accessrights" (or make similar changes) to avoid reserved/key words. Also, when creating the tables, do NOT put double-quotes around table/field names, instead allow Oracle to uppercase the names automatically. (ATK's database calls do not double-quote field and table names so you'll get a bunch of "table not found" and "field not found" type errors if you use the double-quotes to force Oracle to keep the table/field names in lowercase.)

	=Conclusion=		=Conclusion=

2008-12-31T12:34:59Z

← Older revision		Revision as of 12:34, 31 December 2008
Line 139:		Line 139:
	</sql>		</sql>

	* Note that the "node" and "action" columns in the "access" table must be exactly as shown (including case).		Note that the "node" and "action" columns in the "access" table must be exactly as shown (including case).

	If you change them in any way (such as capitalizing the column names), your profile permissions will be saved, but not loaded again later (resulting in users not having permissions to anything and all of the checkboxes for profile permissions being empty when you view the profile again later).		If you change them in any way (such as capitalizing the column names), your profile permissions will be saved, but not loaded again later (resulting in users not having permissions to anything and all of the checkboxes for profile permissions being empty when you view the profile again later).

2008-12-31T12:34:19Z

← Older revision		Revision as of 12:34, 31 December 2008
Line 138:		Line 138:
	)		)
	</sql>		</sql>

			* Note that the "node" and "action" columns in the "access" table must be exactly as shown (including case).

			If you change them in any way (such as capitalizing the column names), your profile permissions will be saved, but not loaded again later (resulting in users not having permissions to anything and all of the checkboxes for profile permissions being empty when you view the profile again later).

	And add the profile node:		And add the profile node: