1994 1995 1996 1997 1998 1999 2000 2001 2002 2003 2004 2005 2006 2007 2008 <2009> 2010 2011 2012 2013 2014 2015 2016 2017 2018 2019 2020 2021 2022 2023 2024 | Index | 1994 1995 1996 1997 1998 1999 2000 2001 2002 2003 2004 2005 2006 2007 2008 <2009> 2010 2011 2012 2013 2014 2015 2016 2017 2018 2019 2020 2021 2022 2023 2024 |
<== Date ==> | <== Thread ==> |
---|
Subject: | RE: Access security problem |
From: | "GOURNAY Jean-Francois" <[email protected]> |
To: | <[email protected]> |
Date: | Wed, 9 Sep 2009 14:34:52 +0200 |
Thanks to Martin and Andy
for their help and useful explanations concerning the use of RULE( 0 | 1 … I did more systematic
tests and I have this strange situation: ASGVAL UAG user
spiral2 user spiral2mgr user gournay 1 tous W W W OK 2 develop - -
(should be W) - WRONG 4 physique W - - OK 8 gournay - W
(should be -) W WRONG W : database WRITE access - : no write access I modified the CALC
expressions accordingly to Martin suggestion : CALC("A&1") instead of CALC("A&1=1").
But I don’t think I have to write CALC
(A>0&&A<2) as my A value comes from a longout record. J.F. Gournay CEA Saclay IRFU/SIS De : GOURNAY
Jean-Francois This
message sent yesterday didn’t show up. Hello I try the following ASG
configuration file: UAG(tous) {spiral2, spiral2mgr, gournay} UAG(physique) {spiral2} UAG(develop) {spiral2mgr} UAG(gournay) {gournay} HAG(hag) {dappck110} ASG(DEFAULT) { INPA(ASGVAL) RULE(1,READ) RULE(1,WRITE) {
UAG(tous)
HAG(hag)
CALC("A&1=1") } RULE(1,WRITE) {
UAG(develop)
HAG(hag)
CALC("A>>1=1") } RULE(1,WRITE) {
UAG(physique)
HAG(hag)
CALC("A>>2=1") } RULE(1,WRITE) {
UAG(gournay)
HAG(hag)
CALC("A>>3=1")
}
} The idea is to change
WRITE permission depending on the value of a longout record ASGVAL (ASGVAL.VAL
= 1,2,4,8) It doesn’t work:
for A=1 the 3 users defined in “tous” have WRITE access
whatever UAG. For A != 1 no WRITE access at all. As I am in ASG DEFAULT, I
did’nt specify anything for the ASG Fields in the database. What is wrong in this scheme? Another point: I
did’nt really understand the meaning of RULE(1 … vs RULE(0 … Thanks! J.F. Gournay CEA Saclay IRFU/SIS |