a) It were possible to navigate the user based on a layout name parameter supplied in the web address,
- and -
b) The system does not require authentication,
Lacking any further conditions, it seems that there would be little, if anything, to prevent a Staff user from using the URL to access the StudentSearch, or vice versa: a Student user using the URL to access the StaffSearch.
Automatically navigating the user based off of the URL would be a convenience, but it would offer no access restriction.
Would this pose a security risk for your system, or is there no such security risk involved in this scenario?
You can not do this from the same account, there is no way for IWP to see which user is entering.
I would suggest to make at least 1 account 'staff' with IWP rights and use an URL with user and password to enter the database and use the Get ( AccountName )
command to see which user enters, and go to the appropriate layout.
An url with user and password can be something like this:
An other possibility, but less elegant, would be to make a separate database 'Staff' and log into that for the staff. Then use the start script of the Staff database to start the Documentarchive database with the paramameter 'Staff' and handle the rest in the Documentarchive database.
Hope this helps,
Ruben van den Boogaard
Thankyou Ruben. Your suggestion of using
is a good solution.
Both staff and students can only browse the database ayway (it's a hints & tips database in which some records are only relevant to staff), and the staff data is not very sensitive.
Thanks for yoour help.
Can you explain this a little bit more? I'm new to IWP and I'm not sure I undestand the mechanicsof how to use the URL. A little more step by step might make more sense to me.
Create two accounts in your database (called MyDatabase), eg. staff (with password=zzz) and student (with password=ccc).
Create a script On Start, which has: if get(AccountName)=staff then go to layout Staff else go to layout Student.
In Options>Script Triggers, set OnFirstWindowOpen to the On Start script.
Now on the web pages that access the database, have two different links, one for staff and the other for students:
Hope this helps.