|
|
Posted by Lόpher Cypher on 10/08/52 11:36
zek2005 wrote:
> Hi!!!!
>
> I started to work with sessions and I have a doubt about users access.
> Is there a way to allow a group of users to do something that another
> group can't?
>
> I mean, I am giving the chance to interchange customers between branch
> managers, but I don't want the the personnel bellow manager can do it.
> So if this personnel enter the application made in php, they can see
> and do things different that the manager.
>
> If there any article, page or explanation about it, I will appreciate.
>
Sorry, don't know :)
The easiest way would be to assign privileges to users. I assume you
store staff records in database so, add something like 'access' field.
Then, perhaps, have access=200 for managers and access=100 for personnel
under them. In the script, before showing an "interchange" page, check
the access of logged user, and if it is below 200, deny access.
--
- lΓΌpher
---------------------------------------------
"Man sieht nur das, was man weiΓ" (Goethe)
Navigation:
[Reply to this message]
|