Re: Security problems

This WebDNA talk-list message is from

2000


It keeps the original formatting.
numero = 30268
interpreted = N
texte = >I have diferent users in different groups, the name of the groups are >something like, [admin_xx] [admin_yy] [admin_zz] >I also have the [admin] group that is the one with all the preferences and >security of webcatalog. >The problem is that any user of any group can go into the admin pages but >any of them can go into any othe group exept their own group and the [admin] >group, I check all the admin pages and all of them have the [protect admin] >tag, also I check the other pages, and all of them have their [protect >admin_xx] tags.The underscore is probably causing the problem here -- those admin_yy groups are probably being treated as admin yy because the underscore is considered to be a word break character. Try changing the name of your various admin groups to adminxx adminyy.Technical Support ********************************** Smith Micro, Internet Solutions Div | eCommerce (WebCatalog) 16855 West Bernardo Drive, #380 | ------------------------- San Diego, CA 92127 | Software & Site Development WebCatalog Support: (858) 675-0632 | http://www.smithmicro.com Fax: (858) 675-0372 **********************************------------------------------------------------------------- This message is sent to you because you are subscribed to the mailing list . To unsubscribe, E-mail to: To switch to the DIGEST mode, E-mail to Associated Messages, from the most recent to the oldest:

    
  1. Re: Security problems (Rodolfo de la Garza 2000)
  2. Security problems (Rodolfo de la Garza 2000)
  3. Re: Security problems (WebDNA Support 2000)
  4. Security problems (Rodolfo de la Garza 2000)
  5. Re: Security problems (Jesse Proudman 2000)
>I have diferent users in different groups, the name of the groups are >something like, [admin_xx] [admin_yy] [admin_zz] >I also have the [admin] group that is the one with all the preferences and >security of webcatalog. >The problem is that any user of any group can go into the admin pages but >any of them can go into any othe group exept their own group and the [admin] >group, I check all the admin pages and all of them have the [protect admin] >tag, also I check the other pages, and all of them have their [protect >admin_xx] tags.The underscore is probably causing the problem here -- those admin_yy groups are probably being treated as admin yy because the underscore is considered to be a word break character. Try changing the name of your various admin groups to adminxx adminyy.Technical Support ********************************** Smith Micro, Internet Solutions Div | eCommerce (WebCatalog) 16855 West Bernardo Drive, #380 | ------------------------- San Diego, CA 92127 | Software & Site Development WebCatalog Support: (858) 675-0632 | http://www.smithmicro.com Fax: (858) 675-0372 **********************************------------------------------------------------------------- This message is sent to you because you are subscribed to the mailing list . To unsubscribe, E-mail to: To switch to the DIGEST mode, E-mail to WebDNA Support

DOWNLOAD WEBDNA NOW!

Top Articles:

Talk List

The WebDNA community talk-list is the best place to get some help: several hundred extremely proficient programmers with an excellent knowledge of WebDNA and an excellent spirit will deliver all the tips and tricks you can imagine...

Related Readings:

AddlineItem (2000) [returnraw] and form variables (1998) Multi-processor Mac info ... (1997) Read and weep (2003) I give up!! (1997) Virtual hosting and webcatNT (1997) A Global Variable (1997) Goodbyes (2007) WebDNA Mail issues (2002) [format 40s]text[/format] doesn't work (1997) searchable list archive (1997) BBedit wierdness upon opening "wide" database (2006) [searchString] (1997) Capitalize (2000) OT: Poll Results (2002) WebCat2b13MacPlugIn - [include] doesn't allow creator (1997) Adding content advice needed (1998) Bad creator codes which cause access denied error message (1997) thankyou.tmpl (1997) [WebDNA] [hideif]'s not working in [sendmail] (2008)