Can I give selected access to result page based on visitor ID?

[arnaudrager371142]

Hi,

I have in mind to develop a database with dataassist and manage the access right with securityassist.

What I would like to achieve is:

- Have the visitor to log in
- The visitor can insert a request in the database
- The admin can update the request with additional info
- The visitor can search for his request and reach the results page.

I want the results page to be accessible only to the visitor that made the original request.

How could I manage that with security assist?

Thanks a lot for the help!

[Ray Borduin]

Surely you don't expect me to write a step by step tutorial for you on demand encompassing all of the features you want in your application.

You need to take a different approach... Try to do this yourself.... design the pages. Make them look the way you want them to. Take it one page at a time. Try to do what you want using the documentation and post here when you are stuck.

Include the specific page you are stuck on. What you are trying to do exactly at that step of the process and what problems you are having.

In terms of how would you manage creating the application you want to create... I'd start with creating the database. Did you do that part yet?

[arnaudrager371142]

Of course not, sorry if I was not clear on the exact step I was stuck.

I have already developped everything (database running, connection and pages created with data assist: search, results, update pages ...)

I have also login and registration page and can sucessfully restrict access to page based on what kind of visitor is logged in.

What I do not know how to do is to avoid having all visitors access the entry posted by other visitors. I would like each visitor to be able to access only the results of the record they have inserted in the database but not the record created by other visitors.

Is it possible to do that with security assist? I was thinking about restricting access based on visitorid (which is unique) but how can I do that in the page access manager?

I hope this give a little more specifics on where I am stuck.

Thanks

[Ray Borduin]

Usually you would do this by filtering the results by the visitor ID stored in the session variable on the results page so that they only see their results. Do the same filter on the details page and use redirect if recordset is empty. You don't need to use the page access manger for this.

[arnaudrager371142]

Thanks for the help!