CKFinder 1.x/Developers Guide/ASP/Configuration/Access Control - Revision history

Admin: moved CKFinder/Developers Guide/ASP/Configuration/Access Control to CKFinder 1.x/Developers Guide/ASP/Configuration/Access Control

2010-05-28T06:46:32Z

moved CKFinder/Developers Guide/ASP/Configuration/Access Control to CKFinder 1.x/Developers Guide/ASP/Configuration/Access Control

Wiktor: /* Example 1 */

2009-03-12T10:03:09Z

‎Example 1

W.olchawa at 12:03, 11 January 2008

2008-01-11T12:03:46Z

W.olchawa at 12:01, 11 January 2008

2008-01-11T12:01:28Z

W.olchawa at 11:55, 11 January 2008

2008-01-11T11:55:31Z

W.olchawa at 11:55, 11 January 2008

2008-01-11T11:55:06Z

W.olchawa at 11:45, 11 January 2008

2008-01-11T11:45:34Z

W.olchawa at 11:42, 11 January 2008

2008-01-11T11:42:40Z

W.olchawa at 11:40, 11 January 2008

2008-01-11T11:40:07Z

W.olchawa at 11:39, 11 January 2008

2008-01-11T11:39:21Z

@@ Line 25: / Line 25: @@
 If you want to restrict the upload, rename or delete of files in the "Logos" folder of the resource type "Images":
 <pre>Set accessControl(1) = DefineAccessControlItem("*", "Images", "/Logos", true, true, true, true, true, false, false, false)</pre>
-The above example only refers to file operations in the folder "/Logos" itself. It doesn't restrict operations on the folder so the user can delete or rename the folder. In order to limit users ability to modify the folder (not its context) you should change permissions in the parent folder.
+The above example only refers to file operations in the folder "/Logos" itself. It doesn't restrict operations on the folder so the user can delete or rename the folder. In order to limit users ability to modify the folder (not its contents) you should change permissions in the parent folder.
 ==== Example 2 ====

@@ Line 35: / Line 35: @@
 === Sessions ===
 The RoleSessionVar is a session variable name that CKFinder must use to retrieve the "role" of the current user.
 <pre>CKFinder_Config.Add "RoleSessionVar", "CKFinder_UserRole"

@@ Line 35: / Line 35: @@
 === Sessions ===
 The RoleSessionVar is a session variable name that CKFinder must use to retrieve the "role" of the current user.
 <pre>CKFinder_Config.Add "RoleSessionVar", "CKFinder_UserRole"

@@ Line 34: / Line 34: @@
 === Sessions ===
 The RoleSessionVar is a session variable name that CKFinder must use to retrieve the "role" of the current user.
@@ Line 44: / Line 42: @@
 Session("CKFinder_UserRole")="admin"
 %&gt;</pre>
 ==== Example 3 ====

@@ Line 60: / Line 60: @@
 '''<br>'''
-Now let's say you have an authentication mechanism somewhere in your web application. In this file you initialize the session; command and assign one of the pre-defined roles to the user:
+Now let's say you have an authentication mechanism somewhere in your web application. Command and assign one of the pre-defined roles to the user:
 <pre>&lt;%
 Session("CKFinder_UserRole")="admin"

← Older revision	Revision as of 06:46, 28 May 2010
(No difference)

@@ Line 47: / Line 47: @@
 ==== Example 3 ====
-In your config.php file you can create three different roles:<br> First role, '''every user''' (wildcard "*" is used):
+In your config.asp file you can create three different roles:<br> First role, '''every user''' (wildcard "*" is used):
 <pre>Set accessControl(1) = DefineAccessControlItem("*", "*", "/", true, false, false, false, true, false, false, false)
 </pre>

@@ Line 9: / Line 9: @@
 Functions are definied in the following order:
 <pre>Function DefineAccessControlItem( _ role, resourceType, folder, _ folderView, folderCreate, folderRename, folderDelete, _ fileView, fileUpload, fileRename, fileDelete )</pre>
 * '''role'''<br>The role is an attribute which sets the type of the user. It is set to "*" as default and you may treat as 'every user'. You may set this parameter to other name like: 'user' or 'limited_functions'. The name of the user type will be directly connected to the function the user may use.
@@ Line 19: / Line 18: @@
 * '''other information'''<br> Many "AccessControl" entries can be added. All attributes are optional.
 Subfolders inherit their default settings from their parents' definitions.
-<br>Example:<br>If you want to restrict the upload, rename or delete of files in the "Logos" folder of the resource type "Images":
+==== Example 1 ====
 <pre>Set accessControl(1) = DefineAccessControlItem("*", "Images", "/Logos", true, true, true, true, true, false, false, false)</pre>
-The above example only refers to file operations in the folder "/Logos" itself. It doesn't restrict operations on the folder so the user can delete or rename the folder. In order to limit users ability to modify the folder (not its context) you should change permissions in the parent folder.<br>Example:
+The above example only refers to file operations in the folder "/Logos" itself. It doesn't restrict operations on the folder so the user can delete or rename the folder. In order to limit users ability to modify the folder (not its context) you should change permissions in the parent folder.
 <pre>Set accessControl(1) = DefineAccessControlItem("*", "Images", "/", true, true, false, false, true, false, false, false)</pre>
-Now a user can view and create a folder, but he will be unable to rename or delete it. This is the best way to secure your folders from unauthorized access. '''Note''':Please, remember to adjust Dim accessControl(0) to Dim accessControl(1) as necessary.
+Now a user can view and create a folder, but he will be unable to rename or delete it.
-=== sessions ===
+=== Sessions ===
 In order to enable the access control options for different users you should initialize a session.
 <pre>CKFinder_Config.Add "RoleSessionVar", "CKFinder_UserRole"
 </pre>
-The session is a mechanism which will allow you to give different permissions to different users. <br>Example:<br>In your config.asp file you create three different roles:
+==== Example 3 ====
-First role '''admin''' '''(*)''':
+In your config.php file you can create three different roles:<br> First role, '''every user''' (wildcard "*" is used):
-<pre>Set accessControl(1) = DefineAccessControlItem("*", "*", "/", false, false, false, false, false, false, false, false)
+<pre>Set accessControl(1) = DefineAccessControlItem("*", "*", "/", true, false, false, false, true, false, false, false)
 </pre>
-Second role '''user''':
+Second role '''registered user''':
-<pre>Set accessControl(2) = DefineAccessControlItem("user", "*", "/", true, true, false, false, true, true, false, false)
+<pre>Set accessControl(2) = DefineAccessControlItem("registered", "*", "/", true, true, false, false, true, true, false, false)
 </pre>
-Third role '''guest''':
+Third role '''admin''':
-<pre>Set accessControl(3) = DefineAccessControlItem("guest", "*", "/", true, false, false, false, true, false, false, false)
+<pre>Set accessControl(3) = DefineAccessControlItem("admin", "*", "/", true, true, true, true, true, true, true, true)
 </pre>
-You've created three different users permissions.
+You've created three different users permissions. The default user (everybody) is allowed to browse all files and folders. Registered user has also the ability to upload files and create folders. The administrator has full permissions.
-'''Important:''' Note that when the role is set to '''*''' the user always has administrative privileges even though all the options are set to '''false'''.
+'''<br>'''
-Now you must create a place where you will point out the role you want to use e.g. a file. In this file you put initialize the session and write the command which will access you pre-defined role:
+Now let's say you have an authentication mechanism somewhere in your web application. In this file you initialize the session with session_start(); command and assign one of the pre-defined roles to the user:
 <pre>&lt;%
-Session("CKFinder_UserRole")="user"
+Session("CKFinder_UserRole")="any_other_value"
 %&gt;</pre>