2. PHPRunner General questions
  3. Security limitions
This topic is locked

Security limitions

 		4/19/2008 8:00:31 PM
PHPRunner General questions
G
 genegerwin author

I have 3 levels of security I need to observe. On the face of it, I can only partially implement what I need using PHPR with just one app.
In one table, I maintain a large number of records for multiple clients, each with multiple projects.
Top Level: Administrator - access to everything

2nd: Supervisors - Access to all records in assigned projects, access to some admin functions

3rd: Agents - Access only to records assigned to them
I there some way to implement this using groups and record ownership, or do I have to create separate apps?
J
 		Jane 4/21/2008

Hi,
use group permissions for Administrator and Supervisors: create one admin group, group for each project and default group for others (agents).

Then create custom views of your tables on the Datasource tables tab for agents and set up [b]User can see and edit their own records only[/n] security method for these views.
G
 		genegerwin author 4/21/2008

Hi,

use group permissions for Administrator and Supervisors: create one admin group, group for each project and default group for others (agents).

Then create custom views of your tables on the Datasource tables tab for agents and set up [b]User can see and edit their own records only[/n] security method for these views.


I didn't quite follow what you suggested, but it inspired the following (maybe this is what you meant):
Create 2 fields in the project database table, "Agent" and "Supervisor"

Create 3 views - one for the agents that restricts them to owned records based on value of Agent field, one for the supervisors that restricts them to their records based on Supervisor field, a 3rd view accessible only to administrators that gives them access to everything
I haven't tried using views yet, maybe this is what I was missing.
Thanks