This topic is locked

URL Security

11/1/2008 6:15:47 PM
ASPRunnerPro General questions
M
mccreelake author

When using master-detail relationship tables and you go from a master table to a detail table, I would like to limit the users ability to change the masterkey value in the URL or at least cause something to happen when they change it. For instance, if they have gone from a master table to a detail table and the records are filtered out by masterkey, you can erase that part of the URL to see all the records in the detail table. Besides using advanced security on the detail table (which is presenting a problem for me) is there a way to cause the URL to re-direct or anything to keep users from doing that?
Any help appreciated.

Sergey Kornilov admin 11/3/2008

You need to use Advanced Security for this purpose.
To prevent users from accessing certain records in the database you need to perform a server-side validation. This is what Advanced Security for.