I would recommend the following to control access to your site:

First of all, combine the two users tables (this is database normalization).
Setup a "users_groups" table and define groups such as "Public, Internal, Extranet, 
etc.".
Setup a linking table between the users table and the groups table.
Setup a table full of template names (or better yet, fuseactions).
Setup a linking table between template names and groups.

Build an administrator to add people to groups.
Build an administrator to add templates to groups.

Build a security validation script which will look at the person's groups to determine 
whether or not the current template is within one of those groups.

---mark


--------------------------------------------------------------
Mark Warrick
Phone: (714) 547-5386
Efax.com Fax: (801) 730-7289
Personal Email: [EMAIL PROTECTED]
Personal URL: http://www.warrick.net 
Business Email: [EMAIL PROTECTED]
Business URL: http://www.fusioneers.com
ICQ: 346566
--------------------------------------------------------------


> -----Original Message-----
> From: Rif Kiamil [mailto:[EMAIL PROTECTED]]
> Sent: Sunday, September 17, 2000 12:09 PM
> To: '[EMAIL PROTECTED]'
> Subject: Extranet's
> 
> 
> Dear All,
> 
> I am current designing our 2nd Intranet and we know it about a years time
> where are going to have Extranet users. I just want to know. 
> Would u develop
> a total separate system for Extranet users or give then access to 
> only parts
> of the Intranet?
> 
> Any ideas about Security and database design e.g. We have a User Table and
> Employees table. Users are employees that have access to the 
> intranet. Where
> would u put the extranet users in the users table and employees table or
> create there an extranet user table.
> 
> 
> Rif
> 
> 
> Rif Kiamil
> Head of Network Admin / Project Coordinator of Intranet & Web Based
> Applications 
> JJ Fast Food Distribution LTD
> Tele 020 8885 9218 / Fax 020 8885 9213
>  
> 
> ------------------------------------------------------------------
> ------------
> Archives: http://www.mail-archive.com/[email protected]/
> To Unsubscribe visit 
http://www.houseoffusion.com/index.cfm?sidebar=lists&body=lists/cf_talk or send a 
message to [EMAIL PROTECTED] with 'unsubscribe' in the body.

------------------------------------------------------------------------------
Archives: http://www.mail-archive.com/[email protected]/
To Unsubscribe visit 
http://www.houseoffusion.com/index.cfm?sidebarRsts&bodyRsts/cf_talk or send a message 
to [EMAIL PROTECTED] with 'unsubscribe' in the body.

Reply via email to