The following warnings occurred:
Warning [2] Undefined variable $unreadreports - Line: 26 - File: global.php(961) : eval()'d code PHP 8.1.2-1ubuntu2.14 (Linux)
File Line Function
/global.php(961) : eval()'d code 26 errorHandler->error
/global.php 961 eval
/showthread.php 28 require_once





× This forum is read only. As of July 23, 2019, the UserSpice forums have been closed. To receive support, please join our Discord by clicking here. Thank you!

  • 0 Vote(s) - 0 Average
  • 1
  • 2
  • 3
  • 4
  • 5
Function Level Access Control
#1
Hey Userspice developers,

I just released my project to test and I'm really happy with all the help from userspice. For future versions of userspice, I would like to point out a potential feature that I noticed when I implemented userspice to my project.

Right now userspice controls user's access to the page level, meaning that based on the user's permission level, he/she can either enter a page or not, and there is no third option. But sometimes it would be cool to allow a certain group of user to access the page, and not granting them the permission to do any editing. On the admin's side, when the admin assigns a page to a user group, the admin would be able to do a "edit/read_only" selection for that group.

To generalize this idea, the selection under each page does not necessarily need to be limited to "edit/read_only". Maybe it would be possible to list the features on each page as a multiple-selection dropdown box, so that the admin can specify the user's permission to function level.

One way that I can think of to do this would be to create a separate table in the database called "page_function_matches" for the developers to fill out the functions they have on each of their pages, and then in userspice, the admission_permission.php page reads through the table to list all functions under each page, so that the admin user can choose functions they want to be available for each user group. In the developer's pages side, the developers would add a user group info detection logic at the beginning of their page.php file. If the usergroup info comes with the desired function id, then the page would enable that particular function.

That's just one way to do it that I'm currently using for my project. I'm not a computer science person so I don't know if this is a good method or not. I'm sure you guys would have a much better idea to do this. Please let me know of any questions.

Thanks
Angel
  Reply


Messages In This Thread
Function Level Access Control - by Angel - 09-26-2016, 02:41 PM
RE: Function Level Access Control - by karmarpgs - 11-16-2018, 09:52 PM
Function Level Access Control - by brian - 09-26-2016, 02:44 PM
Function Level Access Control - by Angel - 09-26-2016, 03:07 PM
Function Level Access Control - by Angel - 09-26-2016, 03:09 PM
Function Level Access Control - by brian - 09-26-2016, 05:46 PM
Function Level Access Control - by Steve_Dickson - 11-15-2016, 08:54 PM
Function Level Access Control - by meetmec12 - 01-03-2017, 08:09 PM
Function Level Access Control - by mudmin - 01-03-2017, 10:44 PM

Forum Jump:


Users browsing this thread: 1 Guest(s)