Can send you what I've done if you like -- basically the same thing.
Structure of USERS table I used is as follows:

Items 8 and 12 thru 18 are Y/N fields that provide/deny access to various buttons
on various templates throughout the app. Just a bunch of <CFIF...> statements 
throughout the program -- the values of the items in this table are stored 
in client variables so they are avaiable throughout the app.

I used the login/password and session management login contained in Chapter 17
of Sybex's Mastering Cold Fusion directly and then added fields as I needed them.

User Level is a 0/1 thing with 0 meaning no access (so don't have to remove a 
user from the table to deny access).

Structure for table:    USERS.DBF
Field  Field Name      Type                Width    Dec   Index   Collate Nulls
    1  F_NAME          Character              15                            Yes
    2  L_NAME          Character              15                            Yes
    3  USER_NAME       Character              25                            Yes
    4  USER_ID         Character              10            Asc   Machine    No
    5  PASSWORD        Character              10                            Yes
    6  LAST_CHNG       Character              16                            Yes
    7  USER_LEVEL      Character               1                            Yes
    8  REPT_MENU       Character               1                            Yes
    9  EMAIL           Character              70                            Yes
   10  PHONE           Character              30                            Yes
   11  FAX             Character              30                            Yes
   12  CAN_APRV        Character               1                            Yes
   13  CAN_RECALL      Character               1                            Yes
   14  CAN_FTP         Character               1                            Yes
   15  CAN_EXPORT      Character               1                            Yes
   16  CAN_ADMIN       Character               1                            Yes
   17  ONLY_SHIP       Character               1                            Yes
   18  CAN_AP_SHP      Character               1                            Yes
** Total **                                  234

     ^
    / \__
   (    @\___
  /          O
 /    (_____/
/_____/
Whoof...
410-757-3487

-----Original Message-----
From:   Heidi Belal [SMTP:[EMAIL PROTECTED]]
Sent:   Sunday, April 01, 2001 10:52 AM
To:     CF-Talk
Subject:        Password Protection

Hi all!
I have a question that i'd like suggested solutions to
if possible!
I want to allow certain people to access certain
pages. 
I already have a log in page which is password
protected, but everybody who logs in has full access
to all the pages.  I want to eliminate that full
access.
So, how about if i categorize the people into various
levels of access, and assign each a number.  Then have
that number in the database in the password/username
table.  Then when a person tries to access the page,
before displaying it checks which number/level the
person is in and if the person is allowed access.
What do you think?
Thanks!



=====
Heidi Belal
ICQ# 32127109
http://m3.easyspace.com/hmbelal

A bus stops at a bus station.
A train stops at a train station.  On my desk
I have a work station...
~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~
Structure your ColdFusion code with Fusebox. Get the official book at 
http://www.fusionauthority.com/bkinfo.cfm

Archives: http://www.mail-archive.com/[email protected]/
Unsubscribe: http://www.houseoffusion.com/index.cfm?sidebar=lists

Reply via email to