Security level assignments

The original DW User Authentication tools allows the coder to create a user login, complete with a "level" assignment, so I could restrict access to certain pages based on that security level of that user record logging in. I don't see that in the mySQLi behavior from you all. Is it missing for a reason?

We are going to be updating Security Assist to use the MySQLi server behaviors in the next major release. Then it will have our full Groups/Rules definition capability including access groups and of course more. We left it out of this version to prevent confusion in that eventuality.

You can manually implement a groups solution by saving the group into the session and comparing its value on restricted pages for now.

Hmm.. can you give me a code example of how I would do the comparison you mentioned above? Also, what exactly do you mean by "saving the group in the session"?

In the login user server behavior there is a tab for "Store Values" which allows you to store as many of the logged in user's fields into the session as you need. If you store their UserGroup field into the session then you can compare it and redirect on subsequent pages to restrict access to users that have a specific UserGroup value as identified by that session variable value.

For example if you stored the UserGroup value in the session as UserGroup then this code:

<?php 

if ($_SESSION['UserGoup'] != "1" && $_SESSION['UserGroup'] != "2") {

  header("location: login.php");

  die();

}

?>

would keep you off the page and redirect you to login.php if your user group wasn't 1 or 3.

This will work great for now. Looking forward to the upgrade.