secure logins

[Charles Brucks]

I have figured out how to use the login that came with the example and have seemed to integrate that into my app nicely. Now what i need to do is in my user file that hole usernames, passwords for validation i also have group fields (4 to be specific). I need a way, i'm thinking in the aftervalidation event, to read all for of those into variable.
I need this, because in my customer file i have a consultant field, and each user may have up to for different consultants. These then grant the user access to only customer records that belong to thier consultants.

ie. user password group1 group2
john

[Charles Brucks]

RE: secure logins

grrr sorry about that, i'll finish now.

in my user file i have something similar
user password group1 group2
john miller test1 test2
kathy tanner test2

now in my customer file it might be like this
custnum custname consultant
111 jill's diner test1
112 jack's crabs test2
113 bob's ribs test2
114 beth's shrimp test3

in this simple setup when john logs in he should only have customers 111,112 and 113 available for editing, whereas kathy should only see 112 and 113 while neither should see 114.

i have the login screen then it moves to a customer selection screen and the only options that should show in the drop down are the one dictated by the chart above. Any ideas how to do this and have it be thread specific so that if john and kathy logged in at the same time via my website that they would see only their respective customers and the variables don't get crossed?

Thanks in advance for any suggestions and help. Sorry for the novel and the broken post, darn cat walking around my desk hehe.

Chuck

[Cheryl Lemire]

RE: secure logins

Hi Chuck,

I was following along with you fine until you mentioned accessing via your website at the same time. Did you create the login via Alpha Five Version 6, or did you do this in a WAS application?

There are many ways to accomplish what you are trying to do, but we need to know where you are doing it first. Within A5 or via a5w pages using WAS in a browser?

Cheryl

[Charles Brucks]

RE: secure logins

I'm Creating a WAS app from my original A5V5 app. This will be accessed from my website via a link. They then log in, select a customer on their list determined from the method previously described and then print reports (or email them in pdf).

Hope this claifies what i was saying. If not Email me and i can get you a copy of my A5V5 app and the link to what i already have on my website. Thanks again for all your help cheryl.

chuck

[Cheryl Lemire]

RE: secure logins

OK ... first I would suggest you create session variables taking the login data and assigning it to them. Here is a sample:

******************

%A5
dim session.user_num as n 'declares a session variable as numeric
dim session.admin_level as n 'declares a session variable as numeric
dim session.fn as c 'declares a session variable as a character

if right(request.script_name,9) "" "login.a5w" then
'only test if this wasn't the login page that was just requested
if .NOT. eval_valid("session.fn") then
'session.fn does not exist, so this session has expired
response.redirect("login.a5w")
else
if session.fn = "" then
'session.fn is empty which means the user has not logged in yet
response.redirect("login.a5w")
'redirect to the login page
end if
end if
end if
%

******************

Access only records that match the logged in user ... you can do this through a query.filter:

query.filter = "user_num=" + session.user_num
'this filters the records returned to only show records where
'the user_num field matches the value stored in the variable
'session.user_num

*****************

Display only records that match the company (sc)

%A5
'query.description = "only show records matching the sc"
'query.filter = "sc='" + tcompsec.sc + "'" 'this filters the records returned to only show records where the sc field matches the value stored in the variable sc" + ""%html%
'query.sort = "sc + desc" 'this sorts the records by description
tinv = table.open("inv") 'open the inv table
'idx = tinv.query_create() 'apply the filter defined by query.filter above
tinv.fetch_first() 'go to the first record in the inv table in the results returned by the filter
%

***************

Showing it this way looks very confusing since it is partial. I believe somewhere on this board I attached the files, I will look and if I can find it I will post the thread link here.

Good Luck
Cheryl

[Cheryl Lemire]

RE: secure logins

OK, My sample is on the Web Application Server message board, which is probably where this thread should be as well since your question is about WAS and not V6.

http://msgboard.alphasoftware.com/alphaphorum/read.php3?num=16&id=80&loc=0&offset=0&sortby=lastreply&direction=desc&thread=80

I believe my attachment was message ID 106

Good Luck