How can I deny users changing records

[Krechting]

Hi All,

I have an Access db which has a LoginCheck table.
I use this table to login with name and password.
But there is also in the table a field right which can be
"read" or "write".
I want to be able to use this field so users which can may
only "read" do not enter a page where a record can be edited.

I use the following code in each page.

Response.Expires = -1000 'Makes the browser not cache this page
Response.Buffer = True 'Buffers the content so our Response.Redirect will work
If Session("UserLoggedIn") <> "true" Then
Response.Redirect("login.asp")
End If

Now I need some code that when a user wants to go to the edit-page
and his rights are only "reading", he cannot get in.

Regards,

MArco
The Netherlands

[Don Grover]

May be a better and more grace full idea is to still view page but not able
to edit

Read in read/write field and if its readonly set a session variable to
"readonly"
then swap the submit button text for the session variable.

<%
'Allows user to view but not perform any Data Insert & Update Functions
(ie. They can look but not change)
If Session("editaccess") = "0" Then
sReadOnly = "readonly"
sChangeButtonState = "&nbsp;ORDERING DISABLED"
Else
sReadOnly ="submit"
sChangeButtonState = "PLACE ORDER >>"
End If
%>

'Button line in form
<td nowrap><input type="<%=sReadOnly%>" value="<%=sChangeButtonState%>"
name="btnCheckout" class="cmdflat"></td>

Regards
Don


"Krechting" <m.krechting@chello.nl> wrote in message
news:a71c776d.0312241342.5294664e@posting.google.c om...

> Hi All,
>
> I have an Access db which has a LoginCheck table.
> I use this table to login with name and password.
> But there is also in the table a field right which can be
> "read" or "write".
> I want to be able to use this field so users which can may
> only "read" do not enter a page where a record can be edited.
>
> I use the following code in each page.
>
> Response.Expires = -1000 'Makes the browser not cache this page
> Response.Buffer = True 'Buffers the content so our Response.Redirect will

work

> If Session("UserLoggedIn") <> "true" Then
> Response.Redirect("login.asp")
> End If
>
> Now I need some code that when a user wants to go to the edit-page
> and his rights are only "reading", he cannot get in.
>
> Regards,
>
> MArco
> The Netherlands

[Bullschmidt]

If Session("UserCanReadOrWrite") <> "write" Then
Response.Redirect("login.asp")
End If

Best regards,
J. Paul Schmidt, Freelance ASP Web Developer
[url]http://www.Bullschmidt.com[/url]
ASP Design Tips, ASP Web Database Demo, Free ASP Bar Chart Tool...


*** Sent via Developersdex [url]http://www.developersdex.com[/url] ***
Don't just participate in USENET...get rewarded for it!