Re: [phplib] Modifying perm_sel() in perm From: Arno A. Karner (karner <email protected>)
Date: 05/14/00

ur problem is whats below, whats above, php session auth security was set
up for u either have or u do not have, now saying that u can alter the
code and make presumstions like in the documentation, but then u manage
it, u condon it, u own it. but ive done simalar things with permsion level
less than < some number or persions contained in $val && $min_set, u chose
or roll ur own as i will shortly.

last application i wrote, created table procpriv, which contained prvlidge
level any one must posess to run the procreeedure, in html web apps, ive
decided to change the philosify to pagepriv, so u have to be
authenticated, and possses a certian privledge level to run, this allows
me to stand back from the web app, and give the client control, and me
deiniabliity i guess, so its not my fault, u wanted flexability, i wanted
denieablilty.

as always comments, flames, meaningful constructive comments wellcome,
along with any humor welcome

My opinions are my own and not that of my employer even if I am self employed

On Sat, 13 May 2000, Graeme Merrall wrote:

> Hi.
> I'm writing a system for user managementusing PHPLib and I've run into a
> small prob.
> Users of a certain level (operator) can add users while those below
> cannot. TThere is another level above operator (superuser).
> My problem is that an operator can edit their own account, as well as
> another users, and increase their security level to 'superuser' as the
> drop box for selecting the user level is built using $perm->perm_sel().
> Is there a way to extend the code to only display a drop box using the
> current user level and below? My permissions setup is:
> var $permissions = array(
> "user" => 1,
> "authority" => 3,
> "helpdesk" => 7,
> "operator" => 15,
> "superuser" => 31
> );
>
> I've had a look at the code but the whole bit-shifting thing is a bit of
> a blck hole to me.
>
> Cheers,
> Graeme
>
> ---------------------------------------------------------------------
> To unsubscribe, e-mail: phplib-unsubscribe <email protected>
> For additional commands, e-mail: phplib-help <email protected>
>
>

---------------------------------------------------------------------
To unsubscribe, e-mail: phplib-unsubscribe <email protected>
For additional commands, e-mail: phplib-help <email protected>