Questions tagged [user-roles]

A user role is a group of users that share the same privileges or permissions on a system. Use this tag for questions about how user roles work in a particular security framework, or questions about the implementation of user roles in your program.

A user role is a group of users that share the same privileges or permissions on a system. For example, a blog platform may define a group of platform admins and groups of blog admins, blog editors and blog readers.

The concept is linked to , as a user role is a group of users who share common user permissions. It is common that a system allows users to have several roles, the user then has the union of all the permissions of their roles.

Use this tag for questions about how user roles work in a particular security framework, or questions about the implementation of user roles in your program.

944 questions
0
votes
1 answer

Is there a way to implement permissions in Backbone View

I am currently working on a large application in Backbone. I am posed with the challenge of implementing field level permissions on the form. One way is to trick the text API of require.js and have it fetch views/partials from the MVC controller and…
Salman
  • 3,137
  • 4
  • 23
  • 31
0
votes
1 answer

How to simulate user rights problems on a SQL Server with trusted connection?

I developed a small C# utility that performs data verification, clean up and export. Now I am writing a manual for users and I would like to simulate the situation where users might not have enough rights to perform certain database operations…
Alexander Galkin
  • 12,086
  • 12
  • 63
  • 115
0
votes
1 answer

determine all peoplesoft role grants/revocations for a given period

my company is running peoplesoft 8.49 and i'm looking for a way to determine which users have either had new roles granted to them or had roles removed within the past year. i can clearly see which users have what roles in the PSROLEUSER table,…
nullrevolution
  • 3,937
  • 1
  • 18
  • 20
0
votes
1 answer

ACL for php applications

I have a question about ACL implementation. Is it good to maintain the ACL rules in DB? or we can create the ACL rules at file level (in one of the file) and read it from there. As i was reading about the ACL implementation in CakePHP & other…
Vijay Kumbhar
  • 896
  • 1
  • 13
  • 31
0
votes
1 answer

.NET Security Exception only in external code

I am using VS2012 with VB.NET for a winfowms app, using Active Directory roles. Running the program as a user without permissions, I am getting an (expected) security exception when trying to launch this form. I have a form that looks like…
0
votes
1 answer

Rails 3 Is it Bad Practice To Imply A User Role?

I have a user table with a self-referential relationship between instructors and students. Currently students are related to their instructors by way of an instructor_id foreign_key. A student will always have an instructor and an instructor will…
Noz
  • 6,216
  • 3
  • 47
  • 82
0
votes
1 answer

bad roles redirect to 403 instead of fail

I use Symfony2 system for my user authentication, and when a user with another role than ROLE_ADMIN try to log in, he can, but he is blocked on a 403 page. This is my security config : security: encoders: Me\UserBundle\Entity\User: …
emurb
  • 147
  • 2
  • 13
0
votes
3 answers

Restrict certain tags from non-admins in Wordpress

I run a multiple author website. I want to restrict a few tags from being selected by my authors. The only options that I found so far was techniques to replace the free tag text field with a list (similar to the category list). This is not a…
Gary Woods
  • 1,011
  • 1
  • 15
  • 33
0
votes
2 answers

How do I display information for user accounts?

I have a website I'm developing and have roles setup with one group "admin" that I want to be able to select a user and display information about that user...name, password, security question and so on. What would be the easiest way to get this…
Jim S.
  • 203
  • 8
  • 24
0
votes
1 answer

Dynamic table creation regarding permission: design issue

Assume I've 2 user levels: user(u) and admin(a). I want to show both users a set of data, but the users is not permitted to see al data. c1 | c2 | c3 | c4 | ------------------- u/a| a | u/a| a | In a MVC structure where do I have to determine…
OrangeTux
  • 11,142
  • 7
  • 48
  • 73
0
votes
2 answers

Windows authentication based role management in ASP.NET Web Application

I am not quite sure if I am managing the user roles appropriately in an ASP.NET application. Is such an approach is correct, or incorrect or can be improved? All the user's are added to the users table in the database, which have fields for example:…
HOY
  • 1,067
  • 10
  • 42
  • 85
0
votes
1 answer

Symfony 1.4 Different CRUDs for different roles

I want to provide specified actions for different role in Symfony 1.4 project. Project contains several database tables which values can be modified only by certain roles. For example, an administrator gains access to CRUDs for all models. Another…
Khozzy
  • 1,064
  • 4
  • 15
  • 29
0
votes
1 answer

Wordpress custom plugin not shown in roles except admin

I wrote a custom wordpress plugin that is shown in the left menu bar in the backend of WP. My problem is, that it is just shown if I log in as an administrator. If the editor logs in he can't see it. Is there any way that I can enable it so that…
Sebsemillia
  • 9,366
  • 2
  • 55
  • 70
-1
votes
1 answer

Ruby on Rails login

for a university project i have to create a small ruby on rails application, in Netbeans, which allows staff of the university to maintain their absence records. The sample logins available in books have been regarding a singular user table. My…
ryan
  • 1