Restricting Access to Your Pages in Java

Maker QR Code in Java Restricting Access to Your Pages

Here are a few examples of when restricted access may be useful: You have a page that you only want users with Administrator privileges to be able to view You want to make sure that users log in before they can view a specific page You want to review newly registered users before allowing them to access members-only pages To restrict access to a page, you need to do the following tasks: Add Restrict Access to a Page server behavior to that page If you want to use authorization levels to further restrict page access, you need to add a column to your user database table to maintain information about which access privileges each user is entitled to Follow these steps to restrict access to a page:

1 Open the page you want to restrict access to 2 In the Server Behaviors panel, click the plus (+) sign and select User

3 In the Restrict Based On area, select one of the following options:

Username and Password: Select this option if you only want users with a valid username and password to access the restricted page Use it when you aren t concerned about access levels (or just aren t using them) Username, Password, and Access Level: Select this option if you only want users with specific access privileges to be able to view the page Specify one or more authorization levels for the page for example, Administrator

Dreamweaver adds a server behavior to the page ensuring that only authorized users can access the page

Creating record update pages Trying out your record update page Deleting records by using delete pages Putting your delete page to the test

o far in this mini-book, we ve shown you how to browse, search, and insert data But, before you go away thinking you ve discovered everything you need to know, we need to tell you in the words of a late night television commercial But wait, there s more! The record update and delete operations are the last two database functions commonly used in dynamic database sites For example, suppose that employees at your company can view their employee data online Over time, they may want to change their employment details or have fun changing the data of their office mates Or perhaps a mean ol HR administrator may need the ability to delete an employee record all together Boo! In any case, you need to give users the ability to update and delete database records from a Web page, which is what this chapter is all about

Before users can update a record, they need to be able to search for the record that they want to update Therefore, you need to create a search page and a results page (We re worn out from talking about how to do that, so see Book IX, 2 for full details on how to create and work with search and results pages) Additionally, you need to create an update page that enables users to enter the data for updating the record Here s a closer look at the three pages that you need to create: Search page: This page allows the user to search for a record that he wants to update For example, in the case of an employee record, the search page simply searches the employee that s logged in because employees can t modify other employee information Results page: This page displays the record in a form The form defaults to the values currently in the database (before the update) and has an update button

Update page: This page performs the update and tells the user when an update is successful Here s how the update process works: