This topic is locked

Users can’t see and edit their own data

12/1/2009 5:48:51 AM
ASPRunnerPro General questions
K
Kirberg author

Hi All.
I am running ASPrunner 6.1 and want to create a database where users create and update their own datasets. To authenticate, I use the following event before login to the login page:
if Request.ServerVariables("LOGON_USER")<>"" then

SESSION("UserID") = Request.ServerVariables("LOGON_USER")

SESSION("AccessLevel") = ACCESS_LEVEL_USER

Response.Redirect "menu.asp"

end if
The same account value is written by the following code into the table the users want to access.
BeforeAdd = True

strUserID = Request.ServerVariables("LOGON_USER")

values("Employee") = strUserID
Both snippets are working fine and the values are identical.
I got a user table with the following columns. UserID, CorpID and Password. The value in CorpID is exactly as shown by the webpage when I log in. Password is empty.

In my ASPrunner project I have the option "Create login page" enabled to use a database and I am using the user table. The "username field" is the column "CorpID" and the "Password field" is "password".

"Users can see and edit their own data only" is configured in the advanced window, for the table the users want to access. The dropdown "Users Table" has the value CorpID and the "Main Table" has got "Employee". This is the field you can see in the code above, which adds the logged in user to a dataset.

Dynamic permissions are configured with two groups.

An example user is part of one group which have all permissions to the table except "Admin mode (access to all records)".
The problem is that the user can't see or edit the own entries as it is configured. I can't see any obvious issues. Is there a bug in the version I use or do I expect something from the software that it simply can't do?

Any help is appreciated.

Regards

Richard

K
Kirberg author 12/1/2009

Hi again. I just turned off the automatic login.

Using the same configuration with a static password does work now. Any ideas where the difference is?

Regards

Richard

J
Jane 12/1/2009

Hi,
unfortunately User can see and edit their own records only security method works for dynamic username and password (Username and password from database option on the Security tab).

K
Kirberg author 12/1/2009



Hi,
unfortunately User can see and edit their own records only security method works for dynamic username and password (Username and password from database option on the Security tab).


Thanks Jane. Will this be fixed in a newer version or is this by design?

Sergey Kornilov admin 12/1/2009

This is by design.
This option doesn't make much sense with static passwords as you can only have one static password per system.