August 30, 2008 12:10am pdt

1. SidFishes 204,731
2. gdemaria 204,094
3. Zvonko 191,035
4. _agx_ 103,710
5. Plucka 93,513
6. SBennett 49,530
7. zadoc 49,250
8. hielo 43,750
9. erikTsomik 31,010
10. Jester_48 27,025
11. pmascari 24,754
12. Mr_Nil 24,710
13. js_vaughan 24,050
14. dgrafx 16,675
15. pigmentarts 16,150
16. Kerrdo 14,850
17. danrosent... 14,300
18. msfletch 13,920
19. srikanthm... 12,950
20. b0lsc0tt 12,000
21. ee_rlee 10,500
22. Yamagami 9,900
23. digicidal 9,550
24. rucky544 9,200
25. dwkd 9,175

1. gdemaria 546,086
2. _agx_ 477,265
3. SidFishes 331,537
4. SBennett 212,175
5. Zvonko 200,099
6. Plucka 115,213
7. zadoc 76,380
8. pmascari 73,529
9. hielo 65,250
10. Jester_48 63,845
11. js_vaughan 54,450
12. erikTsomik 43,280
13. pigmentarts 36,698
14. dgrafx 31,250
15. danrosent... 28,200
16. digicidal 27,550
17. 73Spyder 26,575
18. Mr_Nil 24,710
19. angelIII 24,200
20. Mause 23,200
21. b0lsc0tt 22,472
22. R_Hos 21,150
23. mplungjan 18,125
24. rucky544 18,100
25. srikanthm... 17,800

07.13.2008 at 05:36PM PDT, ID: 23561453

	[x] Attachment Details

How to permit logged in users to view certain menu items, or folders, based on an assigned UserRoleID?

Asked by EricBourland in Cold Fusion Markup Language

Tags: ColdFusion 8

ColdFusion 8
MS SQL Server 2005

Hi. I built a login application for a client's web site, guardianhelp.org.

I based the application on code in the Forta / Camden book: ColdFusion 8 Web Application Construction Kit (CF8 WACK).

I have successfully set up basic security using session management. It's working.

But I need help with the next two tasks:

* I want certain menu items to be available, or omitted, depending on the logged-in user's UserRoleID.

For example, I want to allow users with UserRoleID = 1, and no one else, to access the /admin/ folder; and I want users with UserRoleID = 5 OR 1 to be able to access the discussion board; so I set up this code:

<CFIF IsDefined('request.user.userRoleID') and request.user.UserRoleID LT 6>
<li><a href="/board/"><span>Discussion Board</span></a></li>
</CFIF>

<CFIF IsDefined('SESSION.auth.userRoleID') and SESSION.auth.UserRoleID IS 1>
<li><a href="/admin/"><span>Admin</span></a></li>
</CFIF>

But when I log in as user Kathryn, with UserRoleID = 1, the Discussion Board and Admin menu items are NOT visible. They should be visible b/c Kathryn has UserRoleID = 1.

* I also want to secure only certain parts of the web site, starting with /admin/ and /board/. Is there an easy way to do this in my application.cfc? The application.cfc appended below executes for every page request, such that a user must be logged in to view any page. I want to secure only a couple of folders.

Thanks very much for any advice.

EricStart Free Trial

         
           
             1:
2:
3:
4:
5:
6:
7:
8:
9:
10:
11:
12:
13:
14:
15:
16:
17:
18:
19:
20:
21:
22:
23:
24:
25:
26:
27:
28:
29:
30:
31:
32:
33:
34:
35:
36:
37:
38:

           
           
             <!--- 
 Filename: Application.cfc
 Created by: Raymond Camden (ray@camdenfamily.com)
 Please Note Executes for every page request
--->
 
<cfcomponent output="false">
 
  <!--- Name the application. --->
  <cfset this.name="GuardianHelpSite">
  <!--- Turn on session management. --->
  <cfset this.sessionManagement=true>
  
  <cffunction name="onApplicationStart" output="false" returnType="void">
 
    <!--- Any variables set here can be used by all our pages --->
    <cfset APPLICATION.dataSource = "ebwebwork">
    <cfset APPLICATION.companyName = "Guardian Help">
  
  </cffunction>
 
  <cffunction name="onRequestStart" output="false" returnType="void">
  
    <!--- If user isn't logged in, force them to now ---> 
    <cfif not isDefined("SESSION.auth.isLoggedIn")>
      <!--- If the user is now submitting "Login" form, --->
      <!--- Include "Login Check" code to validate user --->
      <cfif isDefined("FORM.UserLogin")> 
        <cfinclude template="LoginCheck.cfm">
      </cfif>
 
      <cfinclude template="LoginForm.cfm">
      <cfabort>
    </cfif> 
 
  </cffunction>
  
</cfcomponent>
           
         

Keywords: How to permit logged in users to view …

	Title
1	Cfif isdefined??????
2	Not IsDefined
3	isdefined
4	Week Number problem in CF8
5	<CFIF IsDefined is not working
6	Show the uploaded image

Loading Advertisement...

20080716-EE-VQP-32 / EE_QW_2_20070628

How to permit logged in users to view certain menu items, or folders, based on an assigned UserRoleID?

Asked by EricBourland in Cold Fusion Markup Language

Tags: ColdFusion 8

About this solution