controlling/creating accounts with privileges

Posted on 16th Feb 2014 07:03 pm by admin

hi all,
i'm trying to figure out how i can create/control account with privileges, for instance an Administrator creates an account but gives it guest privileges (able to see data but not edit, or delete it, not able to create users).

when a user logs in, i store his/her privileges is a session.
Code: $_SESSION['staff_privilege'] = $found_user['privilege'];
i wrote this function to check for privileges and placed it in the create user page. (1 = admin, 2 = guest)
Code: function get_privilege() {
if (logged_in() && isset($_SESSION['staff_privilege'])) {
if ($_SESSION['staff_privilege'] == 2) {
redirect_to("../staff/staff_browse.php?privilege=false");
}
} else {
redirect_to("../staff/index.php");
}
}

for instance if a user with guest privileges goes to create user page, he/she will get redirect to another page showing a message.

the above code is working, but i'm wanted other ideas about how this could be accomplished in another way
thanks

Your Answer:

Login to answer

Other forums

mySQL and PHP search
Hello,
I am trying to code a project and ran into a brick wall with one of my pages. I am pretty

Writing Windows Device Drivers with C
Yes: one of the nice features of C is void*. You can put anything there and get anything out. Very

Curly Bracket Delimeters.
I'd always believed that the starting and ending delimeters in preg_ functions had to be the same ch

Posting Serialized Data Not Working
I am trying to send an object from one PHP file to another using POST. I serialize the object and th

captcha error
I have been trying to implement a captcha in php...

here is the code..
Code: (php) [Select

Problem with Subscreen
Dear Experts ,
I am facing a problem with the subscreens. My senario is as follows :

Default TimeZone
The server I'm working with is hosted in America so all times inserted into the database are coming

Unique Visitor Tracking
Hello. Currently, I run a voting site where voters are tracked by their IP address and can only vote

Date Question
I'm using the TIMESTAMP() function within mysql to set the date/time for certain events. However, ho

This is driving me nuts!
This insert query looks to be alright, however I get this error:

QuoteYou have an error in yo