This topic is locked

Security

4/24/2007 3:06:48 PM
PHPRunner General questions
N
nng author

I am evaluating PHPRunner for a project. This project will contain a contact database with customer name and addresses. I need to be able to restrict users in a group from seeing data from users in other groups. What I'm trying to say is several companies will be using this database and when a user from Company A logs in, he should only see customers of Company A, not Company B or C. I envision the login screen asking for Company Number, User ID and Password. Is this something PHPRunner can do without custom code?

Alexey admin 4/25/2007

Hi,
sure, just use Users can see their own data only security mode.

Choose Company as OwnerID field.

N
nng author 4/25/2007

Hi,

sure, just use Users can see their own data only security mode.

Choose Company as OwnerID field.


I don't think that will work. There will be as many as ten users for each company that each need to see all info for that company.

Sergey Kornilov admin 4/25/2007

This is exactly what you need.
If you choose Company Number as OwnerID field all company users will be able to see this company data.
PS. no need to ask for company number on the login page. This number will be retrieved from the Login table automatically.