| 2 |
rsolanki |
1 |
<%
|
|
|
2 |
'===================================================================
|
|
|
3 |
' Access Control General
|
|
|
4 |
'===================================================================
|
|
|
5 |
%>
|
|
|
6 |
<%
|
|
|
7 |
'------------ VARIABLE DEFINITION -------------
|
|
|
8 |
Dim rsAccessControl
|
|
|
9 |
'------------ CONSTANTS DECLARATION -----------
|
|
|
10 |
'------------ VARIABLE INIT -------------------
|
|
|
11 |
'----------------------------------------------
|
|
|
12 |
%>
|
|
|
13 |
<%
|
|
|
14 |
'-----------------------------------------------------------------------------------------------------------------------------
|
|
|
15 |
Sub LoginCheck ()
|
|
|
16 |
If NOT objAccessControl.UserLogedIn Then
|
|
|
17 |
objPMod.PersistInQryString ( aPersistList ) ' Get all persistant parameters
|
|
|
18 |
|
|
|
19 |
If NOT isPopupWindow Then
|
|
|
20 |
Call OpenInWindow ( "Login.asp?rfile="& SCRIPT_NAME & objPMod.ComposeURLWithout("rfile") )
|
|
|
21 |
Else
|
|
|
22 |
Call OpenInParentWindow ( "Login.asp?"& objPMod.ComposeURL() )
|
|
|
23 |
Call CloseWindow()
|
|
|
24 |
End If
|
|
|
25 |
|
|
|
26 |
End If
|
|
|
27 |
|
|
|
28 |
End Sub
|
|
|
29 |
'-----------------------------------------------------------------------------------------------------------------------------
|
|
|
30 |
Sub ApplicationAccessCheck ()
|
|
|
31 |
|
|
|
32 |
'--- Built In Administrator Override ---
|
|
|
33 |
If objAccessControl.UserId = 0 Then
|
|
|
34 |
Exit Sub
|
|
|
35 |
End If
|
|
|
36 |
'---------------------------------------
|
|
|
37 |
|
|
|
38 |
If NOT objAccessControl.UserApplication ( APPLICATION_ID ) Then
|
|
|
39 |
If NOT isPopupWindow Then
|
|
|
40 |
Call OpenInWindow ( "Login.asp?message=1&rfile="& SCRIPT_NAME & objPMod.ComposeURLWithout("rfile") )
|
|
|
41 |
Else
|
|
|
42 |
Call OpenInParentWindow ( "Login.asp?message=1&"& objPMod.ComposeURL() )
|
|
|
43 |
Call CloseWindow()
|
|
|
44 |
End If
|
|
|
45 |
End If
|
|
|
46 |
|
|
|
47 |
End Sub
|
|
|
48 |
'-----------------------------------------------------------------------------------------------------------------------------
|
|
|
49 |
%>
|
|
|
50 |
<%
|
|
|
51 |
'------------ RUN BEFORE CONTROL RENDER -------
|
|
|
52 |
|
|
|
53 |
'--- Login Check ---
|
|
|
54 |
Call LoginCheck ()
|
|
|
55 |
|
|
|
56 |
'--- Application Permissions ---
|
|
|
57 |
Call ApplicationAccessCheck()
|
|
|
58 |
|
|
|
59 |
'----------------------------------------------
|
|
|
60 |
%>
|
|
|
61 |
<%
|
|
|
62 |
|
|
|
63 |
' TODO : Update next line with log on user id
|
|
|
64 |
OraDatabase.Parameters.Add "USER_ID", objAccessControl.UserId, ORAPARM_INPUT, ORATYPE_NUMBER
|
|
|
65 |
OraDatabase.Parameters.Add "APP_ID", APPLICATION_ID, ORAPARM_INPUT, ORATYPE_NUMBER
|
|
|
66 |
OraDatabase.Parameters.Add "PAGE_NAME", SCRIPT_NAME, ORAPARM_INPUT, ORATYPE_VARCHAR2
|
|
|
67 |
|
|
|
68 |
|
|
|
69 |
' Load Static Permissions
|
|
|
70 |
Set rsAccessControl = OraDatabase.DbCreateDynaset( GetQuery ("AccessControlStaticPermissions.sql") , ORADYN_DEFAULT )
|
|
|
71 |
If ((NOT rsAccessControl.BOF) AND (NOT rsAccessControl.EOF)) Then
|
|
|
72 |
objAccessControl.LoadStaticPermissions rsAccessControl.GetRows()
|
|
|
73 |
|
|
|
74 |
End If
|
|
|
75 |
rsAccessControl.Close
|
|
|
76 |
|
|
|
77 |
|
|
|
78 |
' Load Data Permissions
|
|
|
79 |
Set rsAccessControl = OraDatabase.DbCreateDynaset( GetQuery ("AccessControlDataPermissions.sql") , ORADYN_DEFAULT )
|
|
|
80 |
If ((NOT rsAccessControl.BOF) AND (NOT rsAccessControl.EOF)) Then
|
|
|
81 |
objAccessControl.LoadDataPermissions rsAccessControl.GetRows()
|
|
|
82 |
|
|
|
83 |
End If
|
|
|
84 |
rsAccessControl.Close
|
|
|
85 |
|
|
|
86 |
|
|
|
87 |
'' Load Data Permission Variations
|
|
|
88 |
'Set rsAccessControl = OraDatabase.DbCreateDynaset( GetQuery ("AccessControlDataPermissionVariations.sql") , ORADYN_DEFAULT )
|
|
|
89 |
'If ((NOT rsAccessControl.BOF) AND (NOT rsAccessControl.EOF)) Then
|
|
|
90 |
' objAccessControl.LoadDataPermissionVariations rsAccessControl.GetRows()
|
|
|
91 |
'
|
|
|
92 |
'End If
|
|
|
93 |
'rsAccessControl.Close
|
|
|
94 |
|
|
|
95 |
|
|
|
96 |
OraDatabase.Parameters.Remove "USER_ID"
|
|
|
97 |
OraDatabase.Parameters.Remove "APP_ID"
|
|
|
98 |
OraDatabase.Parameters.Remove "PAGE_NAME"
|
|
|
99 |
%>
|
|
|
100 |
<%
|
|
|
101 |
'------------ RUN AFTER CONTROL RENDER --------
|
|
|
102 |
'----------------------------------------------
|
|
|
103 |
%>
|