New Posts New Posts RSS Feed: Object security
  FAQ FAQ  Forum Search   Calendar   Register Register  Login Login

Object security
 Post Reply Post Reply
Author
  Share Topic Share Topic  Topic Search Topic Search  Topic Options Topic Options
DataMan View Drop Down
Groupie
Groupie
Avatar

Joined: 26-Jul-2007
Location: Canada
Posts: 52 		Post Options Post Options   Quote DataMan Quote  Post ReplyReply Direct Link To This Post Topic: Object security
    Posted: 26-Jul-2007 at 10:08am
_popupControl(); Do you guys have an example where a person is not allowed to open a form or save/update/delete data to a form because they do not have the proper security to do so.
 
I can understand how the security currently checks to see if the person logging in is in the User table but how would you implement role security on the Customer Entity?  Would I write code in the SaveSecurityCheck in each Entity that looks at the UserRole entity and if it passes my security logic then returns true?
 
Is there a DeleteSecurityCheck or does SaveSecurityCheck run for Updates/Loads/Deletes/Saves?
 
Thanks
Back to Top
davidklitzke View Drop Down
IdeaBlade
IdeaBlade
Avatar

Joined: 14-Jun-2007
Posts: 715 		Post Options Post Options   Quote davidklitzke Quote  Post ReplyReply Direct Link To This Post Posted: 27-Jul-2007 at 8:38am
Use "IsInRole" to test whether the user is authorized to perform a particular action:
 
 
Use SaveSecurityCheck to prevent undesired saving, updating, or deleting of data.  For an example, see the advanced tutorial:
 
Back to Top
securityservice View Drop Down
Newbie
Newbie


Joined: 23-Oct-2008
Location: Canada
Posts: 1 		Post Options Post Options   Quote securityservice Quote  Post ReplyReply Direct Link To This Post Posted: 23-Oct-2008 at 12:19am
Thank you for sharing useful information.We want you to come up with more information's.


 
Hacker4lease-IT Security Service
Back to Top
 Post Reply Post Reply

Forum Jump Forum Permissions View Drop Down