Security

[Jeff Hoffman]

At 04:17 pm 16/01/00 -0700, you wrote:
>I need to extend security in a group of screens to determine the records a
>user can enter/find based on a location code.  
>
>At this point, it seems the best thing to do is build a dataset with the
>user (signonid) and allowed location code.  The main menu would use the
>Initialize procedure to do a lookup in this dataset to find the user and
>their allowed location code and pass that to the lower level screens.  

This is about the only way, if somebody can show you a better way, please
let me know.


>The lower level screens would have a PostFind procedure to check the
>location code from the record retrieved versus the allowed location code
>passed from the main menu.  If the two codes don't match, issue an ERROR.
>For new records, an edit (or input) procedure on the location code would be
>used to check the allowed location code.

This would be better in a select statement for the file, so that only those
locations required are selected in the first place or
edit the input of the key field, so that the user will get the error
earlier and no record access will be done.
+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+
+ Jeff Hoffman                         + e-mail: J.Hoffman@cchs.usyd.EDU.AU +
+ Director                             +                                    +
+ WoniCon Pty Ltd   (ACN 083 502 630)  +                           ,-_|\    +
+ 21 Prices Circuit                    +  voice: +61 2 9542 1527  /     \   +
+ Woronora    NSW     2141             +    fax: +61 2 9521 3979  \_,-._*   +
+ AUSTRALIA                            +                               v    +
+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-
+
= = = = = = = = = = = = = = = = = = = = = = = = = = = = = = = = = = = = = =
Subscribe: "subscribe powerh-l" in message body to majordomo@lists.swau.edu
Unsubscribe: "unsubscribe powerh-l" in message to majordomo@lists.swau.edu
This list is closed, thus to post to the list, you must be a subscriber.