(Haven't researched this one, so it might have been suggested already.) What about an DTML directive <!--#role somerole--><!--#/role--> which would be a specialized if clause, which includes its content only if the current caller has the specified role? It is often a very convenient way to create administration GUI of a website to simply include links/buttons to the respective administration pages right where the data you want to administer is displayed. Eg: normal users see only a listing of people and their phone numbers and mail addresses, whereas the administrator also have a little link at the end of each entry to a page where the entry can be edited. Anders "Quest" Qvist NetGuide Scandinavia -- Why suffer scarcity? Look for the Open Source and enter a world of plenty!
At 06:00 PM 7/15/99 +0200, Anders Qvist wrote:
(Haven't researched this one, so it might have been suggested already.)
What about an DTML directive
<!--#role somerole--><!--#/role-->
which would be a specialized if clause, which includes its content only if the current caller has the specified role?
You can already do this like so: <!--#if "AUTHENTICATED_USER.has_role('somerole')"--> ... <!--#/if--> You can also test for permissions on objects like so: <!--#if "AUTTHENTICATED_USER.has_permission('View',someObject)"--> ... <!--#/if--> Good luck. -Amos
On 15 Jul 1999 12:50:01 -0500, Amos Latteier wrote:
At 06:00 PM 7/15/99 +0200, Anders Qvist wrote:
(Haven't researched this one, so it might have been suggested already.)
What about an DTML directive
<!--#role somerole--><!--#/role-->
which would be a specialized if clause, which includes its content only if the current caller has the specified role?
You can already do this like so:
<!--#if "AUTHENTICATED_USER.has_role('somerole')"--> ... <!--#/if-->
You can also test for permissions on objects like so:
<!--#if "AUTTHENTICATED_USER.has_permission('View',someObject)"--> ... <!--#/if-->
With browsers which only provide authentication info when it is requested, you also will need to convince the client that it needs to authenticate for the above to work. One easy way to do both of the above items is to include authentication objects in the url which (can) also control authentication. Netscape and I.E. continue to provide authentication info for all requests once it has been established, but don't count on all browsers doing so.
On Thu, 15 Jul 1999, Amos Latteier wrote:
At 06:00 PM 7/15/99 +0200, Anders Qvist wrote:
(Haven't researched this one, so it might have been suggested already.)
What about an DTML directive
<!--#role somerole--><!--#/role-->
which would be a specialized if clause, which includes its content only if the current caller has the specified role?
You can already do this like so:
<!--#if "AUTHENTICATED_USER.has_role('somerole')"--> ... <!--#/if-->
You can also test for permissions on objects like so:
<!--#if "AUTTHENTICATED_USER.has_permission('View',someObject)"--> ... <!--#/if-->
Yes, I realised this. However, I think this is so commonplace that a simpler method (ie the one I suggested) might be motivated. Anders "Quest" Qvist NetGuide Scandinavia -- Why suffer scarcity? Look for the Open Source and enter a world of plenty!
participants (3)
-
Amos Latteier -
Anders Qvist -
kent＠tiamat.goathill.org