The subnet calculator helps you design networks by taking an IP address and network mask and returning information such as network, broadcast address, and host range.
One of a set of tools we're offering as a way of saying thank you for being a part of the community.
Solved
These pages is for Administrators only (My Application)
Posted on 2004-08-12
Hello,
Please help restrict my Administrator pages (about 20 pages) from the rest of the other users.
I have my Access database with a table of users that includes a field for UserLevels.
if the UserLevel is 3 and above, that user should be able to access the 20 cfm pages available only for administrators.
Please I would like to request some code and where to put it. Please be clear as possible. It's the end of the week again and I have to come up with the login module by tommorow afternoon. Please, I hope you understand.
Thanks in advance.
PS. All users of my application will have to login. But only Administratrs have the access to the Admin pages.
By the way, i use the basic session method in Ben forta's book. So, those CFlogout, CFlogin is a bit different from what i am doing.
Please help restrict my Administrator pages (about 20 pages) from the rest of the other users.
I have my Access database with a table of users that includes a field for UserLevels.
if the UserLevel is 3 and above, that user should be able to access the 20 cfm pages available only for administrators.
Please I would like to request some code and where to put it. Please be clear as possible. It's the end of the week again and I have to come up with the login module by tommorow afternoon. Please, I hope you understand.
Thanks in advance.
PS. All users of my application will have to login. But only Administratrs have the access to the Admin pages.
By the way, i use the basic session method in Ben forta's book. So, those CFlogout, CFlogin is a bit different from what i am doing.
[X]
Welcome to Experts Exchange
Add your voice to the tech community where 5M+ people just like you are talking about what matters.
- Help others & share knowledge
- Earn cash & points
- Learn & ask questions
2
- +1
5 Comments
ok how about this when the user logs in ..
and after u authenticate him with the database values...
create a session variable session.userlevel with the appropriate value
just put a if condition on top of the 20 files...
<cfif IsDefined(Session.UserLeve
Show him some data saying no access to this page
</cfabort>
</cfif>
now put this code in a common file that is UserAccess.cfm
and include this file in the top of the 20 files
Regards
Hart
and after u authenticate him with the database values...
create a session variable session.userlevel with the appropriate value
just put a if condition on top of the 20 files...
<cfif IsDefined(Session.UserLeve
Show him some data saying no access to this page
</cfabort>
</cfif>
now put this code in a common file that is UserAccess.cfm
and include this file in the top of the 20 files
Regards
Hart
i have a similar setup but access levels are different, i put my admin only pages in a separate forlder and have in my Application.cfm in the folder
<cfset localAccesLevel=100> <!--- administrative level --->
<cfset RELLOCPATH = "./">
<cfset PARENTPATH = "../">
<cfinclude template="#RELLOCPATH#noHe
and in validateUser.cfm
<!--- validate user login --->
<!--- check for existance of Auth structure created during valid login --->
<cfif not isDefined("SESSION.Auth.Us
<!--- invalid login --->
<cflocation url="#PARENTPATH#_errorPag
</cfif>
<!--- validate user level --->
<!--- compare the access level defined on the page to the user's access level --->
<cfif SESSION.Auth.AccessLevel LT localAccessLevel>
<!--- invalid user access level error --->
<cflocation url="#PARENTPATH#_errorPag
</cfif>
<cfset localAccesLevel=100> <!--- administrative level --->
<cfset RELLOCPATH = "./">
<cfset PARENTPATH = "../">
<cfinclude template="#RELLOCPATH#noHe
and in validateUser.cfm
<!--- validate user login --->
<!--- check for existance of Auth structure created during valid login --->
<cfif not isDefined("SESSION.Auth.Us
<!--- invalid login --->
<cflocation url="#PARENTPATH#_errorPag
</cfif>
<!--- validate user level --->
<!--- compare the access level defined on the page to the user's access level --->
<cfif SESSION.Auth.AccessLevel LT localAccessLevel>
<!--- invalid user access level error --->
<cflocation url="#PARENTPATH#_errorPag
</cfif>
Or you can use a role based method and then if you are using a homegrown approach
<cfif Find("Admin", Session.UserAccess)>
User allowed
<cfelse>
User not an admin - cflocation them away
</cfif>
<cfif Find("Admin", Session.UserAccess)>
User allowed
<cfelse>
User not an admin - cflocation them away
</cfif>
Featured Post
Question has a verified solution.
If you are experiencing a similar issue, please ask a related question
One of the typical problems I have experienced is when you have to move a web server from one hosting site to another. You normally prepare all on the new host, transfer the site, change DNS and cross your fingers hoping all will be ok on new server…
What You Need to Know when Searching for a Webhost Provider
Do you want to know how to make a graph with Microsoft Access? First, create a query with the data for the chart. Then make a blank form and add a chart control. This video also shows how to change what data is displayed on the graph as well as form…
Want to learn how to record your desktop screen without having to use an outside camera. Click on this video and learn how to use the cool google extension called "Screencastify"!
Step 1: Open a new google tab
Step 2: Go to the left hand upper corn…
Suggested Courses
Course of the Month5 days, 7 hours left to enroll
671 members asked questions and received personalized solutions in the past 7 days.
Join the community of 500,000 technology professionals and ask your questions.