Basic Web Functionality - Security Question
| From: | Ged Quayle | Date: | Tue, 12 Aug 2014 08:55:10 +0000 |
| Subject: | Basic Web Functionality - Security Question | ||
| Groups: | php.general | ||
| Request: | Send a blank email to php-general+get-323733@lists.php.net to get a copy of this message | ||
That's your classic case for rbac or uac isn't it? If they have the right
to browse records then they should be able to, if they don't then they
should be locked out. At its most granular would be general user, with the
right to browse their own record, up to your equivalent of root with the
right to browse all.