Adding Users to Groups in Security

[jkeeter]

Re: Adding Users to Groups in Security

Peter...
Excellent Clue!

I did indeed have the user already in security. I was expecting to see the users in my "user" table, but did not. After importing, they were clearly visable.

[Peter.Greulich]

Re: Adding Users to Groups in Security

I did indeed have the user already in security. I was expecting to see the users in my "user" table, but did not. After importing, they were clearly visable.

Yeah, as I have come to learn, developer's copy of security is not the same as the published localhost security - until you import back.
---
Jerry: thanks for the very helpful explanation.

[RodMc]

Re: Adding Users to Groups in Security

John,

What do you have set up in the web security as your userid? I set up this model without e-mail as the userid in case the user changed their e-mail address. If your security settings have it as e-mail then you will have to change your web security for this model or change the model to have the user name field be an e-mail field.

Rod

[RodMc]

Re: Adding Users to Groups in Security

Jerry,

The problem is in validation that you usually need to test for more that the security profile does. Secondly, there needs to be a filter in there that attempts to find out what the user is trying to change. If for example, the user puts in a password, the system (at least I could not find it) would not verify the existing password. If the user typos the password the system will change it and the user will be locked out.

I tried the "a5ws_Validate_WebUser_values()" routine but found it was not quite as robust as just doing things myself. This was mostly just an exercise for myself to learn how the system works. After working with it awhile, I now think I understand it. It helps quite a bit but I am sure is very complicated for a newbie programmer to understand.

I think the three grids that I set up are the three types that most systems will require. Initial registration, user profile change and administration of user records. I am hoping that this will create enough discussion that a standard template could be built.

Rod

[jkeeter]

Re: Adding Users to Groups in Security

Rod...
That resolved one issue. I changed the User ID from email to value and it appears to be working with the exception of this new error message. Any idea what might be causing this one?

[Peter.Greulich]

Re: Adding Users to Groups in Security

Looks like you might have inadvertently wiped out the End Function command in one of your events.

[jkeeter]

Re: Adding Users to Groups in Security

How about this one...
I'll look for the end statement. Thanks!

[Peter.Greulich]

Re: Adding Users to Groups in Security

Yeah, I get that one all the time in the current official build.

[jkeeter]

Re: Adding Users to Groups in Security

ok...good!

It's nothing I did wrong then...

Thanks!

[bea2701]

Re: Adding Users to Groups in Security

Looks like you might have inadvertently wiped out the End Function command in one of your events.

Peter,

There is no end function missing in regdemo.
It's a grid error



Eric

[Peter.Greulich]

Re: Adding Users to Groups in Security

Hi Eric,

You are right, there is none missing in Rod's example. But I speculated that John may have accidentally erased one in his copy.

[jkeeter]

Re: Adding Users to Groups in Security

I cannot tell that I am missing one.
Here is the
CanInsertRecord...code
function CanInsertRecord as v (DataSubmitted as P, Args as p, PageVariables as p, Result as p)
with PageVariables
Result.Cancel = .f.
Result.ErrorHTML = ""
' check for empty fields
if DataSubmitted.Username = ""
Result.Cancel = .t.
Result.ErrorHTML = "<div>User Name is required </div>"
end if
if DataSubmitted.Fname = ""
Result.Cancel = .t.
Result.ErrorHTML = Result.ErrorHTML+"<div>First Name is required </div>"
end if
if DataSubmitted.Lname = ""
Result.Cancel = .t.
Result.ErrorHTML = Result.ErrorHTML+"<div>Last Name is required </div>"
end if
if DataSubmitted.password = ""
Result.Cancel = .t.
Result.ErrorHTML = Result.ErrorHTML+"<div>Password is required </div>"
end if
if DataSubmitted.secques = ""
Result.Cancel = .t.
Result.ErrorHTML = Result.ErrorHTML+"<div>Please select a Security Question </div>"
end if
if DataSubmitted.secans = ""
Result.Cancel = .t.
Result.ErrorHTML = Result.ErrorHTML+"<div>Security Answer is required </div>"
end if
' check for valid e-mail
dim emailvalid as l
emailvalid = regex_match(DataSubmitted.email,"\b[A-Z0-9a-z._%-]+@[A-Z0-9a-z._%-]+\.[A-Za-z]{2,4}\b")
if emailvalid = .f.
Result.Cancel = .t.
Result.ErrorHTML = Result.ErrorHTML+"<div>Invalid Email address </div>"
end if
' check if email already exists
dim emailused as c
dim emailfilter as c
emailfilter = "email = '"+DataSubmitted.email+"'"
emailused = lookup("[PathAlias.ADB_Path]\user.dbf",emailfilter,"email")
if emailused <> ""
Result.Cancel = .t.
Result.ErrorHTML = Result.ErrorHTML+"<div>E-mail already exists </div>"
end if
' check if emails match
if DataSubmitted.email != DataSubmitted.confemail
Result.Cancel = .t.
Result.ErrorHTML = Result.ErrorHTML+"<div>Emails do not match </div>"
end if
' check if passwords match
if DataSubmitted.password != DataSubmitted.confpass
Result.Cancel = .t.
Result.ErrorHTML = Result.ErrorHTML+"<div>Passwords do not match </div>"
end if
' assign page and group and userid
DataSubmitted.page = "index.a5w"
DataSubmitted.group = "Applicant"
'assign userid here so that they cannot see it when viewing page source
DataSubmitted.userid = remspecial(api_uuidcreate())
'add to Alpha Security
if Result.Cancel = .f.
dim uservalue as p
dim uservalue.guid as c
dim uservalue.userid as c
dim uservalue.ulink as c
dim uservalue.groups as c
dim uservalue.password as c
dim uservalue.email as c
dim uservalue.secques as c
dim uservalue.secans as c
dim uservalue.redirpage as c

uservalue.password = DataSubmitted.password
uservalue.ulink = DataSubmitted.Userid
'assign user to group
uservalue.groups = DataSubmitted.group
uservalue.userid = DataSubmitted.username
uservalue.email = DataSubmitted.email
uservalue.secques = DataSubmitted.secques
uservalue.secans = DataSubmitted.secans
uservalue.redirpage = DataSubmitted.page
dim output as p
dim output.controls as p
dim output.controls.guid.value as c
dim request as p
dim rs as p
rs = a5ws_Save_WebUser_Values(output,uservalue,Args.GridDefinition.request)
' if not added to Alpha security do not save and display message
if rs.errors = .T.
Result.Cancel = .t.
Result.ErrorHTML = rs.error_text
end if
end if
end with
end function

Here is the OnGridInitialize code

function OnGridInitialize as v (e as p)
'This event fires when the Grid is initialized. It also fires when the Grid is
're-initialized after a session has expired.

'e.tmpl - component definition
'e.rv - Request Variables (allows you to get at page variables and session variables - e.g. e.rv.var1, e.rv.session.sessionvar1)
'e.rv.Session - session variables. TIP: To set a session variable: e.rv.Session.myNewSessionVariable = "Alpha"
'e.rtc - Run-time calculations (allows you to pass data to other event handlers)

'Example:
'Define a list for a drop-down box
'e.rtc.list1 = comma_to_crlf("Red,Green,Blue")
dim request as P
request = e.tmpl
e.rtc.secquest = a5ws_get_security_ques(request)
end function

[bea2701]

Re: Adding Users to Groups in Security

Your not missing anything.
The regmasterdemo is working correctly incl. "new", has something to do with the regdemo component.
Whats your build ?

[jkeeter]

Re: Adding Users to Groups in Security

v10 build 2814
Sys Addin build 3539

[bea2701]

Re: Adding Users to Groups in Security

Did try to create a new user from regmasterdemo? what happens ?