I have created an event calendar that list upcoming events for each
month. The calendar has two security levels: 1-Administrative and
2-Registered Users. If I'm a registered user (or, in this case, a
supervisor) and click an event, this will direct me to a page stating,
"You have no admin privileges. Click here
<file:///R:/Star2003/Training/UOF/admin.asp> to log in or return to
Event Calendar <outbind://79/Training/UOF/> ". When I click the "Click
Here" link, it directs me to the login page where I'm rrequired to enter
my username and password. When it accepts my credential, it then
directs me back to the Event Calendar were I'm able to select the event
once again. At this point, I'm directed to the registration page were I
can register individuals to attend this event.
Above the calendar, I also have three links, i. e., UOF Home,
Administration, View Events. If I am an Administrator, I should be able
to click the Administration link that redirects me to the login in
screen, which in this case, it does. Once I have logged in, it directs
me an Update page with different admin links displayed. Which is what I
want to see. However, when I log on as a Registered User, when I click
the Administration link I should not be able to see the Update page, if
I'm not an Administrator. But, this is occurring. I have the following
script added to required page as followings:
Script: '------- Redirect user to appropriate page based on security
-------
If NOT IsEmpty(Request.Form("Login")) Then
iAdminStat = Check_Admin
If iAdminStat = 1 Then
If SecLvlID = 1 Then
Session("UOFAdmin") = 1
Response.Redirect "/UOF/EventCalendar/Admin/Updates.asp"
Else
Session("UOFAdmin") = 2
Response.Redirect "http://UOF/Training/EventCalendar";
End If
Else
Session("UOFAdmin") = 0
End If
End If
What do I need to change that will not allow a registered users to view
the Administrator Update page? Or, is there a way to redirect a user
when they click the Administration link that if I'm currently logged on
as a registered users, it will check my credential and redirect me to a
page that states, "You are not authorized to view this page". However,
if your an Administrator you will not see this message, but will be
taken to the correct page.
Any input would be greatly appreciated.
[Non-text portions of this message have been removed]
------------------------ Yahoo! Groups Sponsor --------------------~-->
$9.95 domain names from Yahoo!. Register anything.
http://us.click.yahoo.com/J8kdrA/y20IAA/yQLSAA/17folB/TM
--------------------------------------------------------------------~->
---------------------------------------------------------------------
Home : http://groups.yahoo.com/group/active-server-pages
---------------------------------------------------------------------
Post : [EMAIL PROTECTED]
Subscribe : [EMAIL PROTECTED]
Unsubscribe: [EMAIL PROTECTED]
---------------------------------------------------------------------
Yahoo! Groups Links
<*> To visit your group on the web, go to:
http://groups.yahoo.com/group/active-server-pages/
<*> To unsubscribe from this group, send an email to:
[EMAIL PROTECTED]
<*> Your use of Yahoo! Groups is subject to:
http://docs.yahoo.com/info/terms/
