security assist

Help please.
Client request to have have different dealers access only certain pages, some dealers have multiple brands.
I have 10 different user groups.
I have 7 different pages that can be accessed by these groups.
1 group can access all pages.
1 group can access 3 different pages.
2 groups can access 2 different pages each and
6 groups can access only 1 page each
Each user will log into a distinct group numbered 5 thru 15
At the moment each group number equates to the kind of pages accessible, ie group 6 access 2 pages, see diagram.
I can access any pages with 1 rule.
How do I restrict different pages to the required users?
I am only allowed 1 true statement so how can I allow different user groups access to the same page?
I have tried to use the groups but I can only get 1 group per page, I want to have more than 1 group access the same page.
The "HelperGroupsRulesPHP.php" has all the rules.
Can I have more groups per page. At the moment all the pages use the same rule. If I change a page to a different rule it applies to them all.
How can I have different multiple rules per page?
Can this be done?
I have sent a couple of attachments to help with my dilemma
Thanks
David

My initial thought after reading your post and reviewing your attached diagram was to immediately hit my browser back button. I sat there and thought OMG that's nothing I want to comment on, but then I returned to the post and really looked at that diagram and considered how my clients might benefit from similar applications. (the diagram is both intimidating and inspiring)

This is an awesome project that you're working on. I haven't worked with security assist in over a year, but I'm going to personally play around with it later today to see what I can come up with, but I'm betting that the WA staff will probably come up with a solution for you before even get a chance to play...

You have 7 physical pages.
With the added security you have 20 different page requirements.

Group 5 has full 7 page access
Group 6 has 2 pages
Group 7 has 3 pages
Group 8 has 1 page
Group 9 has 1 page
Group 10 has 1 page
Group 11 has 1 page
Group 12 has 1 page
Group 13 has 2 pages
Group 14 has 1 page

I'm assuming that you have some sort of a USERS table that you query with SecurityAssist. I also assume that you have a GroupID field in there that is a numeric defined field to identify the group security per/login.

Good Luck with your project.

The Diagram makes it look a little more intimidating than it is.

there are really on 7 different requirements:

Page | UserGroups
1 | 5
2 | 5,6,7,8
3 | 5,6,7,10,13
4 | 5,7,9
5 | 5, 14
6 | 5, 11, 13
7 | 12


Create a user group in the security assist access Groups manager for each page. For example, for page 3, create a group named Page 3 and add the following members to the group:
5,6,7,10,13

Then create a security assist access rule for Page 3, set it to use the session userGroup value, In Group: Page 3


For page 4 create a page 4 group with the following members:
5,7,9


then create a security assist access rule for Page 4, set it to use the session userGroup value, In Group: Page 4

See the attached screen shots.

Jason
Eureka! it works.
I was almost there but I was trying to do it backwards, that is I was trying to make the groups for each group, not a page with groups who can access the pages.
Talk about twisted Boolean logic that I can comprehend only every third day, some days I just sit and stare at the screen.
Thanks also to Tom's reply who somehow made me feel better 'cause I couldnt quite get it.
Thanks again
David

When i use access page manager to protect by security assist the directory "upload" i don't see it in the map.

why?

what can i do?

Security assist can only be used to protect PHP pages that are in the Dreamweaver site.


if the upload directory is outside of the Dreamweaver site, it will not show.

an upload directory is usually used to store PDF documents or images, security assist cannot protect these types of files.

But protect these files is the most important thing since it is often "confidentiel" documents

how can we protect our document according to privilege?

to protect files that are not php files, they should be uploaded to the server in a location that connot be access directly through a web address. On a shared server, you will most likely have problems with this, but most hosts will allow you to store files below the httpdocs directory on a dedicated server to prevent direct access.