Menu ▾ ▴

#9 security, admin pages

open
nobody
Coding (14)
5
2002-04-28
2002-04-28
Anonymous
No

regular users can view admin pages and do everything an admin can.

Discussion

  • Daryl G. Smith

    Daryl G. Smith - 2002-05-07

    Logged In: YES
    user_id=447118

    This happens if you have been logged in as admin and then,
    without closing the browser, log in as a regular user.
    Physical security.

     

  • Nobody/Anonymous

    Nobody/Anonymous - 2002-10-08

    Logged In: NO

    I have added an authorization function that allows only
    admin, superadmin or a department manager to use the admin page.
    The department managers can only edit their own department,
    but they can "claim" an employee from another department.
    The configured demo is at http://publicsrecords.net/opp/eps
    and there is a link at http://publicsrecords.net/opp to
    download the modified source.

    I have also added some payroll admin things as well, because
    I only saw the ability to add them and not edit/delete
    things. That was with v1.0. I don't know if v1.01 had that
    all worked out.

     

Log in to post a comment.