Mobile Menu With Security

[phan9413]

Hi, I try to create Menu for Mobile apps by using list as per the example video. However I could not find any security features for individual items in the list control other than security for the whole list.. Anyone can help me on this?

[Nate Mitchell]

Re: Mobile Menu With Security

Phan, when using a list control as a menu, I choose to only show users those menu items that they should have access to.
If you set the list control data source to custom, you can create a xbasic function to dynamically return your jSON data based on the user that is logged in.

[phan9413]

Re: Mobile Menu With Security

Hi Nate

Do you have a simple sample to share? Really appreciate that.

[kiwibruce]

Re: Mobile Menu With Security

I have been wondering for quite a while how to apply security to a menu list,
Nate: Would you share some of your code in your xbasic function?

Thanks in advance

Bruce

[Nate Mitchell]

Re: Mobile Menu With Security

No problem. See the attached ux.
This is referenced as a mobile menu but remember, we are dealing with a standard list control.
Your list data can be sourced a number of different ways (SQL, xbasic, JS function).
The idea here is to limit the list items that a user has permissions to see.
You will still want to secure all of your components the way you always have.

This is a bit simplistic but should get you on your way.
I started with the ux component template MobileAppFramework_with_splitView_hierarchical_menu.
Changed the data source from static to custom and assigned the xbasic function name menuData.
I copied the static jSON and created the xbasic function that will return the jSON.
Lastly, I added an argument to pass in a "role" value.
Simply change the argument value from admin to something else.

Good luck!

customList.zip

[CharlesParker]

Re: Mobile Menu With Security

I do this with a session var based on the groups or userid or company_id however my needs may be in the component. Go to the fields section and using the show/hide expression insert a session var that looks up the group, like session.group = "1234567890" and you get the users group with a session var in the ondialoginitialize.
That would effectively set the fields visibility based on the group.

Beyond that you can also create a search button that filters the info by any particular field (perhaps the userid?) and that button can of course be filtered by group so that only an "admin" could run the filter...so many ideas...

[phan9413]

Re: Mobile Menu With Security

Thanks Nate

[phan9413]

Re: Mobile Menu With Security

Hi Charles, for list item where you set the session variable?

[CharlesParker]

Re: Mobile Menu With Security

The filter is set in the "sql data source" for the list such as
company_id = session.compid

Then in the serverside props ondialoginitialize for the UX I set the value of the session.compid based on the logged in user from a sql lookup
so it would be something like this:

dim cn as sql::Connection
cn.open("::Name::Connection1")

dim pUser as p
dim pUser.userid as c
a5ws_logged_in_user_values(pUser) 
              'gets logged in user data to pointer 'pUser'.
              'session.compid = "12345678" 
'uncomment the above line when I want to do local testing and comment out the below line, sql lookup. Once you add in the session var you cannot preview the list unless the value of the session var is known.
session.compid = sql_lookup("::name::Connection1","users","userid='"+pUser.userid+"'","compid")

so what the sql lookup is doing is getting the company ID (compid) from the users table WHERE pUser.userid = the userid field.
the pUser.userid equals the logged in userid, which is an email - also as a side note this is why you never want two users with the same userid, lol.

This will filter the list based on the compid (or tenantid) and quite frankly this is the brunt of a multi-tenant application. Of course you would need a "users" table with a compid field. One other thing I would consider is ensuring a GUID for your compid's and alpha can generate them...

I was shown this a few years ago and if you search the forums you will see all of my questions I had while learning this myself!

Lists are REALLY awesome - the more you learn the more awesome they become!

[phan9413]

Re: Mobile Menu With Security

Charles

Thanks a lot