SecurityAssist Access to page

Hello,

In SecurityAssist I'm trying to make a page restricted to only users who click on a link which is passed to the page via URL and have the rules manager conditions check if the value in the URL is "=" to a value in a record set in DW.. I'm trying to do this in ASP and so far in the Access Rules Manager I have the value as

<%Request.QueryString("parm")%>
=
<%=(rsUSERS.Fields.Item("email").Value)%>

when I type in a URL like ".asp?parm=email@company.com"

it sends me to the access denied page. Am I missing somehting here or can you not enter the request.querystring into the value portion of the rules manager?

query string parameters can be used in access rules, but using recordset variables can be problematic.

you have to make sure that the recordset is created before any security assist code on the page, especially the include reference to the WA_SecurityAssist/helper_ASP.asp page.

Yup you were right.. I just had to move the code for the record set above the code for the security assist check and it worked. Thanks Jason

you're welcome.

one last question Jason,

How do you make security assist check through the list of records in a database to see if the URL value equals anything in a column. Right now it seems to find the first record but security assist wont go thru the whole column to see if the record exsist.

Thanks

That's not supported in security assist.


What is the ultimate goal you are trying to accomplish?

What is the purpose of passing the email address in the query string variable?

found a easy work around. I just made the recordset be set to a specific entry. so the recordset does the searching first then security assist just goes off that specific entry.