Re: [phplib] page_open() - weird behavior !! From: Michael Chaney (mdchaney <email protected>)
Date: 08/11/00

> Jesse, thanks for your reply.
>
> Yes, I am familiar with the Auth class. The problem is that in my
> application, a user's permissions may change depending on what page he is
> looking at, i.e. he may have "admin" privileges on one set of pages and
> "user" privileges on another. Every page will contain a number of elements
> which would be accessible and/or editable for a user with sufficient
> permissions for that page and not editable (possibly - unaccessible) for
> the same user if he is actually looking at other stuff on the same
> page. More precisely, a user's permissions to edit the result of a
> sqlquery depend on which *row* in the result he wants to look at, on
> the properties of that row...

So you don't really want to use the auth class to do that, it's a bit more
complicated and can probably be handled with another table and a join.

> However, the Session class does not *require* auth to be activated,
> afaik. WHat I don't understand is why page_open does something with
> $HTTP_POST_VARS when it has to set the Session_id cookie. I mean, once the
> cookie is set, everyting works, but why doesn't it work before ??

The problem is that the session class automatically redirects to a new page,
with the session as part of the URL, when it sets the session id cookie.
You lose the posted info with the redirect. If you must do something like
that, use "get" variables instead.

Michael 

--
Michael Darrin Chaney
mdchaney <email protected>
http://www.michaelchaney.com

---------------------------------------------------------------------
To unsubscribe, e-mail: phplib-unsubscribe <email protected>
For additional commands, e-mail: phplib-help <email protected>