It's difficult to tell what is being asked here. This question is ambiguous, vague, incomplete, overly broad, or rhetorical and cannot be reasonably answered in its current form. For help clarifying this question so that it can be reopened, visit the help center.
Closed 10 years ago.
I want to implement a authorization system, that should work on permissions for each individual records.
e.g. User U1 can Read a Record R1
User U2 can Edit/Delete Record R1
i.e. Each Record will have its own set of permitted users for Create/Read/Update/Delete. I dont want tot implement Role based system.
Is there any rails gem/plugin to do that ?
Check out Ryan Bates' CanCan here. It also includes a helpful screencast.
Related
It's difficult to tell what is being asked here. This question is ambiguous, vague, incomplete, overly broad, or rhetorical and cannot be reasonably answered in its current form. For help clarifying this question so that it can be reopened, visit the help center.
Closed 9 years ago.
When I have for example only one record for administrators (only one administrator) with id and password, is it necessary to create a table administrator or not? Why?
There's nothing inherently wrong with a one record table. It's a function of your design. For example, an administrator is not a type of user so you wouldn't stick an administrator in the user's table. But that's a design decision.
It's difficult to tell what is being asked here. This question is ambiguous, vague, incomplete, overly broad, or rhetorical and cannot be reasonably answered in its current form. For help clarifying this question so that it can be reopened, visit the help center.
Closed 10 years ago.
How to find vulnerable sites, where one can login using '0'or'0'='0' and such other combinations ?
I believe you are asking the question with reference to to SQL injection. If the login control is using a query based on string concatenation then chances are that this will succeed in logging in.
It should be: ' or '0'='0
It's difficult to tell what is being asked here. This question is ambiguous, vague, incomplete, overly broad, or rhetorical and cannot be reasonably answered in its current form. For help clarifying this question so that it can be reopened, visit the help center.
Closed 11 years ago.
Using VB.net
I have a differenct users in my software (Windows based application), i want to give the access according to the user rights..
For Example
Admin Login can able to access and edit all the forms
User Login can able to limited access to edit and view the forms
Employee login can able to view the forms only
...
....
Can any one give some ideas or sample code for this...
Need Vb.Net Help
You use the Authorize attribute to accomplish this in MVC.
Authorize Attribute on MSDN
It's difficult to tell what is being asked here. This question is ambiguous, vague, incomplete, overly broad, or rhetorical and cannot be reasonably answered in its current form. For help clarifying this question so that it can be reopened, visit the help center.
Closed 10 years ago.
How can I get the profile of a user on LinkedIn?
Please specify the API and how to get authenticated through that API.
Please specify the complete procedure.
Take a look here for more info:
https://learn.microsoft.com/fr-fr/linkedin/shared/integrations/people/profile-api?context=linkedin/consumer/context
Check out the docs: http://developer.linkedin.com/docs/DOC-1008
It's difficult to tell what is being asked here. This question is ambiguous, vague, incomplete, overly broad, or rhetorical and cannot be reasonably answered in its current form. For help clarifying this question so that it can be reopened, visit the help center.
Closed 10 years ago.
My idea is to retrieve all users from Google app domain using Java.
I retrieved all the users using Provisioning API but when I tried to store the data in the table using JPA, it's returning a timeout error.
I don't know how to store the entire details at a stretch. Please Help me.