Yes indeed, but isn't it strange that when you give a member the dmProfileEdit permission so that the member can use the "edit your profile" link in the overview tab, that when in some way the member knows to link to the dmProfile customlist, he / she can see all users?
And if you want to totally secure the users list, that you have to add that security stuff? Shouldn't this already be in the core to protect and secure? Or is this simply building your own stuff with the framework? On Apr 3, 1:18 am, Blair McKenzie <[email protected]> wrote: > The core webskin does this. It's probably the best example you'll find. > > Blair > > On Fri, Apr 3, 2009 at 12:36 AM, Marco van den Oever < > > [email protected]> wrote: > > > Is the approach like: > > > create permission > > > then in my plugin/customadmin/customlists/tickets.cfm: > > > add <cfimport taglib="/farcry/core/tags/security/" prefix="sec" /> > > add <sec:CheckPermission error="true" permission="blablabla"> > > > ? > > > On Apr 2, 3:09 pm, Marco van den Oever <[email protected]> > > wrote: > > > Anyone? > > > > On Apr 2, 3:18 am, Marco van den Oever <[email protected]> > > > wrote: > > > > > I have a member role with the following permissions: > > > > > Admin > > > > Tickets Create > > > > dmProfile Edit > > > > Tickets Edit > > > > MainNavMyFarcryTab > > > > farUser Edit > > > > > and the following webskin permission: > > > > > * > > > > I know i now enable all webskins, but what should i do when i want to > > > > give a member only a few webskin permissions, put in a long list of > > > > webskin names? Can't believe that's the way to go. So can't believe > > > > this is causing the problem. > > > > > I used "farUser Edit" as i want the member to be able to change the > > > > password through the overview tab link "change password". > > > > > I used "dmProfile Edit" as i want the member to be able to change the > > > > profile through the overview tab link "edit your profile". > > > > > So this all works, but now when i use a link like: > > > > > /webtop/admin/customadmin.cfm?module=customlists/dmProfile.cfm > > > > > I can edit all profiles, even the admin, of course because of the > > > > "dmProfile Edit". > > > > > So how should my approach be when i want a member role to be able to > > > > login and use the webtop, being able to edit and update only own > > > > profile and password? > > > > > Thanks. > > --~--~---------~--~----~------------~-------~--~----~ You received this message because you are subscribed to the Google Groups "farcry-dev" group. To post to this group, send email to [email protected] To unsubscribe from this group, send email to [email protected] For more options, visit this group at http://groups.google.com/group/farcry-dev?hl=en -~----------~----~----~----~------~----~------~--~---
