Forums

This topic is locked

upload security restrictions

Posted 25 Jun 2003 20:28:14
1
has voted
25 Jun 2003 20:28:14 Ken Schwenker posted:
i need some help with a project. i have most of the files for it. i have an upload system tha tupload documents and a user login system. all i need are these apges updates so that the uploads can only be seeny by specific users. so i upload all files and from a dropdown i assign a user to the upload..they all go to a "view files" page but they only see uploads that were assigned to them. i have tried to do this without success...anyone?

Edited by - kschwenker on 26 Jun 2003 17:54:54

Replies

Replied 27 Jun 2003 21:48:11
27 Jun 2003 21:48:11 Robbie Laliberte replied:
This sounds complicated. You may want to rethink how you are doing it.

If I understand the problem, any number of users can upload, but each user is restricted in what uploads they can view?

The easiest way might be to assign security levels to the users. Grouping them that way, it would be easy to filter the recordset based on security.

Did that make sense?

Edited by - chariot on 29 Jun 2003 01:26:31
Replied 29 Jun 2003 15:41:16
29 Jun 2003 15:41:16 Ken Schwenker replied:
well only the admin needs to upload files so that does make it much simpler. admin uploads files and assigned a user to the file. when that user logs in they see only what is assigned to them. so how would i do this? is there a reference anywhere as to what type or structure i would use for this?
Replied 30 Jun 2003 01:42:52
30 Jun 2003 01:42:52 Robbie Laliberte replied:
ohh... well, that's different. Let me think about this and get back to you.
Replied 01 Jul 2003 18:20:41
01 Jul 2003 18:20:41 Ken Schwenker replied:
anyone else have a clue about this?
Replied 03 Jul 2003 16:48:28
03 Jul 2003 16:48:28 Robbie Laliberte replied:
Another question:
1) will multiple users have access to the same files or is each file unique to a single user?

If each file is unique to a single user, I would store that user name in the same table as the name of the file; then build your recordset filtered on the user name.

If multiple people can access the same file, you will need to store access rights in a seperate table... that will get a little more complicated but it can be done. Make's the administrator's job a little more tedious, unless you do a multiple insert hack of some kind.


Reply to this topic