Security on Forms

[[email protected]]

Hi All,

I am trying to set up some security on my forms, I have set up user groups an users, on two forms for example groups Southampton, Oldbury

on a the form OldburyAlloc I have said that users in the Oldbury Group have permission to view this form and on the OldburyAlloc I have said that Southampton have no permissions on this form.

My problem
So when a Southampton user try's to view this form the system tells them they have no permission on this form but when the Click on the OK button the database closes

Is there not somewhere that I can redirect them to the main menu or anything but close the database

Andy

[DaveM]

Re: Security on Froms

My problem
So when a Southampton user try's to view this form the system tells them they have no permission on this form but when the Click on the OK button the database closes

Andy,

You don't say where the question is asked. Typically the button used to open this particular form will have a test run to see if this user has the proper permission to view this form.

I use a number between 1 and 9 for permissions. If the permission is 1, the form simply does not open unless it is ok for a person with permission of one. These permissions are stored in the user table by management who is the only ones that can give permissions. It is then set as a global variable on program startup and sighn in.

Each Form and report only views/prints that user's data with no way to view/print another users data.

Managers can view all and change all.

Dave

[Stan Mathews]

Re: Security on Froms

Hi All,

I am trying to set up some security on my forms, I have set up user groups an users, on two forms for example groups Southampton, Oldbury

on a the form OldburyAlloc I have said that users in the Oldbury Group have permission to view this form and on the OldburyAlloc I have said that Southampton have no permissions on this form.

My problem
So when a Southampton user try's to view this form the system tells them they have no permission on this form but when the Click on the OK button the database closes

Is there not somewhere that I can redirect them to the main menu or anything but close the database

Andy

Possibly as a restatement of Dave's response.

In this situation you wouldn't set the permission in the form to be opened. As you have seen, there's no going back.

You would check the user permission in the code for the button that opens the form, and do nothing (or show them a message), if the permission was not valid.

[[email protected]]

Re: Security on Froms

Hi Stan,

Do you know what the function is to get the users group or would you as Dave said set the user up in a table with permission levels

Andy

[Stan Mathews]

Re: Security on Froms

Hi Stan,

Do you know what the function is to get the users group or would you as Dave said set the user up in a table with permission levels

Andy

Like User_groups()?

[[email protected]]

Re: Security on Forms

Hi Stan/Dave

Here is the script I have come up with to test for permissions, the form open after this inline Xbasic script is the set to conditional action if the var->permisssions = .t. the open the form executes. This seems to be working well

Here is the script

dim permissions as L

permissions = a5_has_permission("[email protected]","form","run",.f.)

if permissions = .f. then
    'Displays a message box (style:'OK Button', image: 'Information symbol', id: 'permiss').
DIM SHARED  permiss_result as N
DIM SHARED  permiss_OK_Button as L 
permiss_OK_Button = .t.

title_var = " Permission"
message_text_var = <<%text%
Sorry You do not have Permission to View this Form
%text%
permiss_result=ui_msg_box(title_var,message_text_var,UI_OK+ UI_FIRST_BUTTON_DEFAULT+ UI_INFORMATION_SYMBOL)
'Test to see which button on the message box was pressed....
SELECT
	CASE permiss_result = UI_OK_SELECTED
		permiss_OK_Button= .t.
END SELECT
end
end if

Andy

[DaveM]

Re: Security on Forms

Here is my method: Using a table. It leaves a global variable with the permissions in it so I can use it anywhere in the program.
-------------------------------------
prmpt_title = "User Code"
prmpt_prompt = "Enter your user code or test if this is a new install"
prmpt_default = ""
scode = ui_get_text(prmpt_title,prmpt_prompt,prmpt_default)
prmpt_title2 = "Your Password"
prmpt_prompt2 = "Enter your Password or test if this is a new install"
prmpt_default2 = ""
pword = ui_get_password(prmpt_title2,prmpt_prompt2,prmpt_default2)
t=table.open("slspeeps",file_ro_shared)
query.filter="username="+quote(trim(scode))
query.order=""
query.options="T"
ix=t.query_create()
if ix.records_get()=0 then
a5.close()
end if
username=t.username
salesman=t.salesname
cellphone = t.cellphone
password = t.password
usernow = t.usernow
permissions = t.permissions
userlot = t.lot
t.close()
perm = permissions
if alltrim(pword)<>alltrim(password) then
a5.close()
end if
----------------------------------

I have a 1 to 9 in var->perm which I can have accessed anywhere in the program. It also leaves a trail wherever the username goes.

Dave