Re: PHP App User Permissions Tecnique
| From: | Yusuf Tikupadang | Date: | Fri, 15 Oct 2004 08:18:44 +0000 |
| Subject: | Re: PHP App User Permissions Tecnique | ||
| References: | 1 | Groups: | php.general |
| Request: | Send a blank email to php-general+get-199567@lists.php.net to get a copy of this message | ||
I think read from database better than from session, because it's more
easy than usnig session.
On Fri, 15 Oct 2004 00:41:31 -0700, Brendon <message144@hotpop.com> wrote:
> I am building a web based community forum type software using PHP. I am
> currently working on how different user privelages are handled. Each
> user is part of a group and each group has varying degrees of privelages.
>
> I need to add in functionality which at the begginning of every script
> check the permission level of the user accessing the page. There are
> about 15 different permissions.
>
> I am debating whether i should store all the permission abilities into
> session variables and they can quickly be checked throughout the script,
> or whether i should query the database to check to see if the user has
> adequate group permissions to perform a certain function.
>
> Could someone give me some advice as to which would be more advisable?
>