hmm... switch, user type, and views

myraleen

ok... here goes...

I have three users ok, a divisional user, with mininum access rights, a divisional dba, with medium rights, and a system dba, who has max rights.

This is a large and complex database and program structure, with various user pages and programs.

Presently, it is set up so that each program checks the user type and indivisiually grants or denies that user access to the page or program they are attempting to access.

Hope everyone's with me so far. 🙂

I'm rather new, to php, this far...

My job, is to set up one program, that I can include in every file/program, to check the user type and allow access rights.

I thought it would be simple, but it's not turning out that way, already i'm having difficulties.

I set it up correctly, for the different menu views, but now can not do anything else, including the footer.

Because of the fact that every page checks the user type, in the same way, but some grant half permission, some all, ect ect.

I am basically looking for some ideas, and to be pointed in the correct direction to go from here.

I was thinking, if the user_type.inc file i'm using for the main program, could check and see where the user is trying to access, or what page they are currently on, or both, maybe that would be a start?? but i'm lost.

hopefully someone has more experience then my blonde brain. 🙂
thanks!

press711

OK I am not sure if this is what you want but here is my recommendation.

authcheck.inc

This is a file containg all your authentication functions.
e.g. isSystemDBA() , isDivisionalDBA() etc..

Each of these functions will do all the checks they need to do and return true or false depending upon the result..

So at the end you should be just be able to include the file at the top of the page and call the desired function. So if you want only systemDBA to access something just include the file at the top of the page and call isSystemDBA() check if it is true. If false redirect to login. (This function for redirection can also be kept in the authcheck.inc file).

Also you can add files such as mainmenu.inc, header.inc and footer.inc if you got common main menu, headers and/or footer

I hope this helps.