Set a value to each user in your database to reflect their permission level.
You can pick any value you like. Like this:
1 = Admin
2 = Data entry operators
When a user logs in, get their permission level from the database, set it to a
session variable or cookie.
Now add code to the top of all your pages that checks this value. If they are
not allowed to view that page, redirect them a different page. Like so:
If Session("Permission_Level") <> "1" Then
Response.Redirect ("Default.asp")
End If
(It would be easier to put this code into an include file and then include it
in all of your pages for easy maintanence)
The above code would ensure that the visiting user had a security level of "1"
and let them view the page. If they did not, it would redirect them.
Mark
Ehtisham <[EMAIL PROTECTED]> wrote:
I start working first time on the administration side.
I make a small project with 5 forms: addrecords.asp,
updatesold record.asp, deleterecords.asp,
displayrecords.asp and a main page from where user
input their id number and password. What i want when
user is a operator it only access addrecrods.asp file.
For this purpose i use a condition in which it checks
if the user is data entry operator it allows only
addrecords.asp file. Problem is that if he go to
address bar and type
the other files they all will display too as i dont
want to allow these files to that user. I need help
what kind of changes i do in my program so that once
user enters as a data entry it only add records and
when user enter with administrator it access all the
files in my program. Any help very appreciate.
Thanks,
__________________________________
Yahoo! Mail - PC Magazine Editors' Choice 2005
http://mail.yahoo.com
---------------------------------------------------------------------
Home : http://groups.yahoo.com/group/active-server-pages
---------------------------------------------------------------------
Post : [email protected]
Subscribe : [EMAIL PROTECTED]
Unsubscribe: [EMAIL PROTECTED]
---------------------------------------------------------------------
SPONSORED LINKS
Active server page web hosting Active server page hosting Active server pages
Active server page asp Active server page training
---------------------------------
YAHOO! GROUPS LINKS
Visit your group "active-server-pages" on the web.
To unsubscribe from this group, send an email to:
[EMAIL PROTECTED]
Your use of Yahoo! Groups is subject to the Yahoo! Terms of Service.
---------------------------------
[Non-text portions of this message have been removed]
------------------------ Yahoo! Groups Sponsor --------------------~-->
Get Bzzzy! (real tools to help you find a job). Welcome to the Sweet Life.
http://us.click.yahoo.com/A77XvD/vlQLAA/TtwFAA/17folB/TM
--------------------------------------------------------------------~->
---------------------------------------------------------------------
Home : http://groups.yahoo.com/group/active-server-pages
---------------------------------------------------------------------
Post : [email protected]
Subscribe : [EMAIL PROTECTED]
Unsubscribe: [EMAIL PROTECTED]
---------------------------------------------------------------------
Yahoo! Groups Links
<*> To visit your group on the web, go to:
http://groups.yahoo.com/group/active-server-pages/
<*> To unsubscribe from this group, send an email to:
[EMAIL PROTECTED]
<*> Your use of Yahoo! Groups is subject to:
http://docs.yahoo.com/info/terms/
