Thread: Design/Logic permission and no permission setup

Hi,

I need help with trying to see if/how this should be done...
I have a search screen that returns the results but on the results, users
can edit records (one at a time)....right now I will have users that enter
records and they should be able to edit some fields then I will have mgmt group users that will be able to edit any records..all fields.

Issue is - I need to have the Add, Search and Results (currently has the Edit link to edit page) open to all and anybody...but of
course in order to have something where only the mgmt group users can edit records/all fields...I need to have them login/setup permissions.

I've used some files someone else created in the past but if I use those here...I would need to setup everyone with an account/permissions to just access the EDIT screen. Those require I setup a usertable it checks for username and sessions.

Should I be having 2 edit screens? one for all users then one for mgmt group (mgmt grp-this one would force to login/account).

Does it sound sensible when clicking the Edit link to Edit page to check if permissions for mgmt. group exists then if so direct to EditMgmtScreen and if not then just direct to EditScreen?

If there is no way...then maybe users after they submit shouldn't be able to edit only the mgmt group...

correct...I have this one another site so only users will certain level can see the edit link...but I'll have too look back at the other code that works because I still have to add all others but with a level 1 and that's what I was trying to avoid is setting up everyone, needs to just be open to all. Will try to post and explain with the other file with this session code . Right now after discussing...just going to setup MgmtGrp for edit and other will not have edit.

in table:

Code:

If cint(Session("AccessLvl")) > 2 then 
			%>	<a href="editItem.asp?ItemID=<%=rs("ItemID")%>">edit</a><%
		Else
			%>&nbsp;<%
		End if