Administrators can only insert/update data of their region

Hi there, I believe I have an unusual task here! I was wondering how to restrict insert/update data to regional adminstrator but other users can see the data across the regions. In this case I have over 70 regions. I have created a datafield in the user table in hold the admin's region and declare the field in the Session values in SecurityAssist Authenticate User. But the challenge is how to set the conditions in SecurityAssist Rules Manager? Do I set conditions for each of the 70 regions, please bear in mind that this condition is for administrator only, there are other users who will be able to view and search for data across all regions. Hope it makes sense. Thanks.

In the users table, set the region for admins to 0.

The table that the user is inserting data to should contain a region column as well.

when the user inserts a record, it should store the region from the session variable.

On the results, update and details pages, edit the recordset to add a new condition to the where clause, you will need to use advanced view in the recordset dialog box:



WHERE (regionColumn <> 0 And regionColumn = paramUserRegion) OR (0=paramUserRegion2)

and create 2 new variables
Name: paramUserRegion
Type: Integer
Default Value: -1
Run Time Value: $_SESSION['userregion']

Name: paramUserRegion2
Type: Integer
Default Value: -1
Run Time Value: $_SESSION['userregion']


NOTE: in my example above, i am using regionColumn as the name of the region column in the table. and userregion as the name of the session variable. you will need to adjust accordingly. also, when editing the recordsets, if there is already a where clause:
WHERE Column = something

dont replace it, just add on:
WHERE Column = something AND (regionColumn <> 0 And regionColumn = paramUserRegion) OR (0=paramUserRegion2)

Thanks Jason, Probably, I didn't it explain well, every region will have one admin and many users. The regional admin can insert and update data as well as do what other users can do but the regional admin can only insert and update data relating to his/her region (70 regions). The admin will be limited to his/her jurisdiction but can view and search data from other regions. . Does it make sense to you?

in this case you will need to have 2 columns, one to set the region and one to set the user to be admin or regular user. and you will need to have 2 session variables storing the region and user level, use those 2 sessions in the recordset where clause.

if you need help configuring this, we can assist through a premiere support appointment:
http://www.webassist.com/premier_request.php

I think what I'm trying to achieve is very similar to this. I have five different user groups (numbered 1-5) in dB column called MembershipType . Two of these user groups are Administrators (MembershipType= 1 & 5). 1 can view and update all user records, but 5 should only be able to view & update those with MembershipType=3&5.

The WADAusers recordset on the results page (set up using the DataAssist wizard) is currently:

SELECT UserID, UserEmail, UserPassword, UserFirstName, UserLastName, CompanyName, MembershipType, UserRegistrationDate
FROM users
WHERE users.userVerified = 1
ORDER BY UserLastName ASC

This displays all the user records.

I already have a session variable for MembershipType set up. How would I amend the above Recordset so that Administrator user group 1 can view as normal, but Administrator user group 5 only sees MembershipType 3 & 5?