This topic is locked

edit/delete unavailable in version 3.1 - 3.2

4/14/2005 1:52:56 PM
ASPRunnerPro General questions
S
Skynet author

I create a proyect with the option "Users can see others user data; can edit their own data only" , with username and password stored in database table "users". UserID (like ownerID) don't exist in Add Page UserID is populated by ASPrunner Pro according information in User Table: OwnerID field in Main Table: OwnerID field. I Add and admin user that can see and edit all users data.
The problem appear when a user that is not the Admin user add new record. After the record is added, Delete/Edit don't appear.
I try with ASPRunner Pro 3.1 , 3.1a and 3.2 beta 1 with same result. How I can fix this?
Thanks

S
Skynet author 4/14/2005

This error can be some error in aspfuntions.asp file?
Check how appear in file:
Function CheckSecurity(strValue, strAction)
if cAdvSecurityMethod = ADVSECURITY_ALL or Session("AccessLevel")=ACCESS_LEVEL_ADMIN then

CheckSecurity = True

if Session("AccessLevel")=ACCESS_LEVEL_ADMIN then Exit Function

end if
if cAdvSecurityMethod = ADVSECURITY_EDITOWN and ( strAction="Edit" or strAction="Delete") then

if Session("OwnerID")=CStr(strValue) then

CheckSecurity = True

else

CheckSecurity = False

Exit Function

end if

else

CheckSecurity = True

end if
' check user group permissions

strPerm = GetUserPermissions(Session("UserID"))

if strAction="Add" and InStr(strPerm, "A")>0 or strAction="Edit" and InStr(strPerm, "E")>0


or strAction="Delete" and InStr(strPerm, "D")>0 or strAction="Search" and InStr(strPerm, "S")>0 _

or strAction="Export" and InStr(strPerm, "P")>0 then

CheckSecurity = True

else

CheckSecurity = False

end if
End Function
Function GetUserPermissions(sUserName)
Select Case sUserName
Case Else

GetUserPermissions = "ADESP"

End Select
End Function

Sergey Kornilov admin 4/14/2005

Hi,
there must be security configuration issue.
You can send the whole content of ASPRunnerPro output folder to support@xlinesoft.com for investigation.

S
Skynet author 4/14/2005

Sent. I will wait for your answer. Thanks for your help.

Sergey Kornilov admin 4/15/2005

It sounds like you forgot to attach files.
Also I need more detailed explanation of this issue.