1 Topic by pgolik

  • pgolik
  • Member
  • Offline

Topic: ID_user problem and a feature request

I have a problem trying to set up user based security. Briefly - I have
$all_see_tables = "no";
$all_affect_items = "no";
$enable_authentication = 1;
$enable_delete_authorization = 1;
$enable_update_authorization = 1;
$enable_browse_authorization = 0;
in my config.php
The site does require a login when trying to acces tables, but after that any user can delete or modify anyone's records. When I looked at tables I noticed that ID_user is 0 on every record. This happens also on a fresh, unmodified installation, where I didn't change anything except the basic options in config.php. The field ID_user is set up in the interface creator according to the readme.

Another question relates to the user authorization system. Would it be very hard to modify the permissions system so that anyone can browse and view records (without logging in), but only logged in users can modify (add, delete or edit) records.

TIA
Pawel

2 Reply by patnaik

  • patnaik
  • Administrator
  • Offline

Re: ID_user problem and a feature request

This issue is fixed in the latest LabStoRe release (1.5.2).

You can download the new version and replace in your installation the few files (indicated in readme.txt)  that have been changed in the new release (or you can replace all files except config.php and interface_creator/uploads). The second part of fixing the issue involves editing the MyQL tables (see readme.txt).

This problem arose because ID_user field for records in the various tables was getting filled not with usernames but with user ID numbers.