Menu
Community /Pin to ProfileBookmark
@NogDogJan 20.2006 — #Probably simpler(?) would be one array. You could put this in an include file:
In each controlled file:
@NogDogJan 20.2006 — #@NogDogJan 22.2006 — #Added an optional 3rd parameter which will provide an array of the user's groups:
Sample usage:
@NogDogJan 22.2006 — #I guess you can't make a reference optional in a function declaration, so the 3rd parameter will have to be required:
The 2nd param ("manager" in my example) is the group you have to belong to to view that page, while the 3rd param will be an array which will be populated with all of the groups in which the user is a member. If a page is to viewable by two groups, you could do:
@NogDogJan 22.2006 — #
Long explanation:
The 3rd arg is an array which gets populated with each of the groups to which the user is a member. By passing it as a reference, it is sort of like using a global variable for it within the function, as any modifications to it are also available outside of the function. So the function does two things: it returns a true/false as to whether the user is in the specified group (2nd arg) and also provides an array (3rd arg) with all of the user's memberships.
Short explanation:
I've created a monster by making a quick change to an existing function to try to meet "moving target" requirements, instead of starting fresh and doing it right. ?@NogDogJan 22.2006 — #OO version:
group.php (include file):
Main file:
@NogDogJan 22.2006 — #You can do whatever you want with the functions. I was just providing examples of how to call them.
Restricting files to certain users?
Hello! Okay, big question for you. I really hope I’m going to explain it properly and fully for you to understand. ?
I will appreciate any help you can provide me with this.
Okay, just to introduce the current setup, I have a staff area which is restricted, and has a PHP login system, which in turn sends our a PHP session stating an account name (of [b]$_SESSION[‘account’];
What I want to do now, is restrict certain pages within that staff area to certain account names, but because I want to do this on multiple ones… here is what I’d like to happen.
On a ‘groups.php’ I’d like to state arrays for about 3 groups, each containing account names – some of these account names need to be used in other groups too (for people that belong to more than just 1).
I was wondering then if on the pages I want to restrict to certain groups, I can use a same if statement to check if their username belongs in that group, and if so, allow them to see the page, or if not to echo out a message of ‘Sorry, you do not have permissions to view this page’?)
Example groups.php:
[code]
$manager = array(‘name1’, ‘name2’, ‘name3’);
$hr = array(‘name1’);
$sales = array(‘name1’, ‘name2’, ‘name3’, ‘name4’, ‘name5’);
$support = array(‘name1’, ‘name2’, ‘name3’, ‘name4’, ‘name5’);
Any help with this would be appreciated! Thank you.
Sign in
to post a comment33 Comments(s) ↴
0
@NogDogJan 20.2006 — #Probably simpler(?) would be one array. You could put this in an include file:[code=php]
function in_group($user, $group)
{
$groups = array("manager" => array('name1', 'name2', 'name3'),
"hr" => array('name1'),
"sales" => array('name1', 'name2', 'name3', 'name4', 'name5'),
"support" => array('name1', 'name2', 'name3', 'name4', 'name5'));
return(in_array($user, $groups[$group]));
}
[/code]In each controlled file:
[code=php]
require "include_file.php";
if( ! in_group($_SESSION['account'], "manager") )
{
// output "not allowed" message
}
else
{
// display the page
}
[/code]0
@NogDogJan 20.2006 — #[code=php]
if( ! in_group($_SESSION['account'], "manager") and ! in_group($_SESSION['account', "hr"))
{
// output "not allowed" message
}
else
{
// display the page
}
[/code]0
@NogDogJan 22.2006 — #Added an optional 3rd parameter which will provide an array of the user's groups:[code=php]
function in_group($user, $group, &$member_of = array())
{
$groups = array("manager" => array('name1', 'name2', 'name3'),
"hr" => array('name1'),
"sales" => array('name1', 'name2', 'name3', 'name4', 'name5'),
"support" => array('name1', 'name2', 'name3', 'name4', 'name5'));
foreach($groups as $group => $members)
{
if(in_array($user, $members))
{
$member_of[] = $group;
}
}
return(in_array($user, $groups[$group]));
}
[/code]Sample usage:
[code=php]
if(in_group($_SESSION['account'], "manager", $groups))
{
echo "<p>You are a valid user and a member of the group(s): ";
echo implode(", ", $groups);
echo ".</p>n";
}
else
{
echo "<p>Danger, Will Robinson! Invalid user!</p>n";
exit;
}
// rest of page....
[/code]0
@NogDogJan 22.2006 — #I guess you can't make a reference optional in a function declaration, so the 3rd parameter will have to be required:[code=php]
function in_group($user, $group, &$member_of)
{
// rest the same
}
[/code]The 2nd param ("manager" in my example) is the group you have to belong to to view that page, while the 3rd param will be an array which will be populated with all of the groups in which the user is a member. If a page is to viewable by two groups, you could do:
[code=php]
if(in_group($_SESSION['account'], "manager", $groups) or
in_group($_SESSION['account'], "hr", $groups))
{
// etc.
}
[/code]0
@NogDogJan 22.2006 — #charles, why are you using this reference as 3rd argument?[/QUOTE]
Long explanation:
The 3rd arg is an array which gets populated with each of the groups to which the user is a member. By passing it as a reference, it is sort of like using a global variable for it within the function, as any modifications to it are also available outside of the function. So the function does two things: it returns a true/false as to whether the user is in the specified group (2nd arg) and also provides an array (3rd arg) with all of the user's memberships.
Short explanation:
I've created a monster by making a quick change to an existing function to try to meet "moving target" requirements, instead of starting fresh and doing it right. ?
0
@NogDogJan 22.2006 — #OO version:group.php (include file):
[code=php]
<?php
class Group
{
// Attributes:
var $groups = array();
// Methods:
// constructor:
function Group()
{
// populate groups with users:
$this->groups = array("manager" => array("user1",
"user2",
"user3"),
"hr" => array("user3",
"user4"),
"sales" => array("user2",
"user5"),
"support" => array("user1",
"user6",
"user7") );
} // end constructor
// Determine if user is member of at least on of the specified group(s)
// Usage: in_group("username", "group1[,group2[...,groupn]]");
function in_group($user, $group)
{
$list = explode(",", $group);
foreach($list as $value)
{
if(in_array($user, $this->groups[$value]))
{
return(TRUE); // found it
}
}
return(FALSE);
} // end in_group()
// return array of groups to which user is a member, or false if not
// a member of any:
function get_groups($user)
{
$groups = array();
foreach($this->groups as $key => $value)
{
if(in_array($user, $value))
{
$groups[] = $key;
}
}
if(count($groups) == 0)
{
return(FALSE);
}
return($groups);
} // end get_groups()
} // end class Group
?>
[/code]Main file:
[code=php]
<?php
// include the class definition:
require "group.php";
// instantiate class as object $grp:
$grp = new Group();
// see if we're in manager or support group:
if($grp->in_group("user1", "manager,support"))
{
echo "<p>We're a valid user for this page.</p>n";
}
else
{
echo "<p>Uh-oh, we're not allowed here.</p>n";
}
// get a list of groups we're in:
if(($ourGroups = $grp->get_groups("user1")) !== FALSE)
{
echo "<p>We are a member of these groups: " . implode(", ", $ourGroups) . "</p>n";
}
else
{
echo "<p>We do not belong to any groups.</p>n";
}
?>
[/code]0
@NogDogJan 22.2006 — #