Work at SourceForge, help us to make it a better place! We have an immediate need for a Support Technician in our San Francisco or Denver office.

Close

#5 User administration

closed
None
5
2005-01-16
2004-04-14
Anonymous
No

I´would like to know how to restrict a user´s access
only to contacts and companies assigned and/or owned
by him

Thanks

Diego Pruneda
Cordoba
Argentina

dpruneda@1por1.com.ar

Discussion

  • Brian Peterson
    Brian Peterson
    2004-04-18

    • assigned_to: nobody --> cdwtech
     
  • Brian Peterson
    Brian Peterson
    2004-04-18

    Logged In: YES
    user_id=204919

    Diego,

    Currently, XRMS has only two access levels: 'Admin', and
    everybody else.

    We are in the process of developing a true Access Control
    Layer for XRMS, but I don't have an estimate on when that
    will be ready. We are using the phpgacl library to provide
    security, but integrating it is proving complicated.

    So, for now, you can't yet do what you have asked. I'm
    sorry. We're working on it.

    - Brian

     
  • michaelest
    michaelest
    2004-04-22

    Logged In: YES
    user_id=1026398

    Can't a kludge be accomplished in the meantime? What if the
    login user and owner were compared - then if they matched,
    the details could be shown - if they didn't match, or if role
    wasn't 'Admin', then details wouldn't be shown.

    Does that make sense?

    I'm looking for the same thing, but just need something
    simple. This project is better than anything else out there - I
    just need to keep things somewhat private.

    Thanks.

     
  • michaelest
    michaelest
    2004-04-23

    Logged In: YES
    user_id=1026398

    Nevermind - I opened up various .php files and modified the
    $user_menu to list to current user only if that user's role is
    not equal to 'Admin.' This prevents regular users from viewing
    others info (not perfect, but the people using it aren't
    technical enough to get around it - and I didn't have to spend
    hours and hours implementing something else.)

    Great product. Let me know where I can donate to the
    cause (again, I'm not a coder).

    By the way, I like the "soup_nazi" function. LOL!!!!!!

    Cheers!

    - Michael

     
  • Brian Peterson
    Brian Peterson
    2004-07-12

    • assigned_to: cdwtech --> braverock
     
  • Brian Peterson
    Brian Peterson
    2005-01-16

    Logged In: YES
    user_id=204919

    Current CVS and the current Development Snapshots contain
    the Permissions ACL system.

    Finally.

    Sorry it took so long.

    Regards,

    - Brian

     
  • Brian Peterson
    Brian Peterson
    2005-01-16

    • status: open --> closed