2. PHPRunner General questions
  3. allowing clients to access dynamic permissions
This topic is locked

allowing clients to access dynamic permissions

 		10/16/2014 5:25:36 PM
PHPRunner General questions
W
 wfcentral author

I'm wondering how other developers get around this issue (maybe I'm just missing something simple).
I like to use dynamic permissions because the clients always come up with many different levels of users (staff, guest, manager, supervisor, etc) that each have different access to tables.
When the project is done I would like to allow the client to add new users to his system and setup what type user they are (see above).
However, giving them access to the ADMIN AREA is an accident waiting to happen. They go in there and start checking and unchecking things to change permissions and then I get a phone call because it's "broke."
How do you handle this situation?
Sergey Kornilov admin 10/16/2014

Well, you either give them admin access and deal with consequences or keep admin access to yourself and make changes to the Admin area based on their requests. There is no silver bullet here.
W
 		wfcentral author 10/16/2014



Well, you either give them admin access and deal with consequences or keep admin access to yourself and make changes to the Admin area based on their requests. There is no silver bullet here.


I created a work-around where I added the _ugmembers table to my project... linked it to my user table by connecting the UserName. Then, I allow them to change the GroupID through a dropdown that has a query to exclude -1 (super-admin) - so, in this way they cannot set a user to super-admin - but, they can switch the user between all the different groups.