| Added: February/20/2005 at 4:15pm | IP Logged
|
|
|
Please Note : ASPProtect v7.x has a new feature called groups that is much more powerful than access levels. Access Levels were left in the product primarily for existing customers that upgrade to the new version so they do not need to make a lot of changes to their site if they were using Access Levels.
More On Access Levels
Again, Examples of managing Access Levels are provided in the "multiple_access_levels" folder included in the root of the Password System. Look at the source code of the ASP pages in that folder with a text editor to see the working code.
Access Levels and how they work can be re-coded to work in many different ways. However, you have to be a good ASP developer to make changes to it. Here is some information on how they work by default.
In the "check_user_inc.asp" that comes in the root of this system Access Levels work as follows.
Level 1 has Access to - Level 1 Level 2 has Access to - Level 1,2 Level 3 has Access to - Level 1,2,3 Level 4 has Access to - Level 1,2,3,4 Level 5 has Access to - Level 1,2,3,4,5 Level 6 has Access to - Level 1,2,3,4,5,6 Level 7 has Access to - Level 1,2,3,4,5,6,7 Level 8 has Access to - Level 1,2,3,4,5,6,7,8 ADMIN has Access to - Level 1,2,3,4,5,6,7,8,ADMIN
Here is some additional info..
If the access levels are too restrictive you can ignore them all together and create your own totally custom solutions. Here is a quick rundown of some of the things you can do.
Ok... so if you want to be really specific about what each user can see and can't .. here's an example of what you can do
Don't use the access levels before the include file.. Don't worry about what you set a user to in the admin area since the access levels won't be used.
Do something like this..
Every time a user logs in session variables are set that you can access at any time.. thus allowing you to know who they are.
So you could do something like this...
<%@ LANGUAGE="VBSCRIPT" %>
<!--#INCLUDE FILE="check_user_inc.asp"-->
<% If Session("USERNAME") = "bob1267" or Session("USERNAME") = "carl45" or Session("ADMIN") = "True" Then Session("PASSWORDACCESS") = "Yes" Else Session("PASSWORDACCESS") = "No" Response.Redirect(Request.ServerVariables("script_name")) End If %>
The following URL explains what Redirects are. http://www.powerasp.com/content/code-snippets/redirects.asp
That would in effect create totally custom access levels.. but you would have to do it manually for each user.
You can also do things like this after a person logs in
Show custom html to any specific user based on either their username or access level ... like so
say there was a menu and a certain link should only show up to username "paully67"
you could do something like this
<HTML> <HEAD> <TITLE></TITLE> </HEAD> <BODY>
<br> <a href="main.asp">Home Page</a> <% If Session("USERNAME") = "paully67" Then %> <br> <a href="paullys_page.asp">Pauls Stats Page</a> <% End If %> <br> <a href="links.asp">Links Page</a>
</BODY> </HTML>
Or you can show custom HTML or links based on Access Levels or any other info.
You can do just about anything with if-then statements and using the built in vbscript functions..
Hopefully this info will help to give you some ideas...
Bottom line is you have to do some work within your site to make the Access Level system really come alive.
Edited by cwilliams on February/20/2005 at 4:16pm
__________________
Best Regards,
Christopher Williams
www.CJWSoft.com
|