Iron Speed Technical Forums
Register Latest Topics
 
 
 


Reply
  Author   Comment  
JRecca

Registered:
Posts: 5
Reply with quote  #1 
Has anyone attempted to refresh a user's security once they have already logged in?

I'm using IronSpeed's Role based security model.

In our app, we made it group based security by creating security groups where the roles can be assigned, then assign the group to a user. When saved, the software automatically copies the group roles to the user roles file then run as it would normally with Iron Speed.

Our software automatically filters all data by the user's selected active company.

The question I get fairly often from existing a new users is can they assign rights to a user based on the active company? Currently we can't, the rights are global to all companies they are assigned to. (ex: company A they can add, edit and delete, company B just view only)

How we are considering to provide this is by allowing system managers to assign a security group to each company a user is assigned to. Then when they select a new active company, their rights would be automatically updated with the active company rights they have been assigned.

The potential problem I can see is the user's rights within the software would not reset until they log out then back in again.

Does anyone know how we could refresh their current configured rights (as if they just logged in) while still logged in?

Yeah, it's probably a little confusing, buzz me if you need a better explanation.

Thanks,

John

__________________
John Recca
VP Development
GG-One software, Inc.
akeshgupta

Avatar / Picture

Iron Speed MVP
Design, Develop & Deliver

Registered:
Posts: 1,095
Reply with quote  #2 

Hi John:

Iron Speed is keeping the user roles as part of the session level cache.  If you refresh that cache, you will be able to achieve what you are looking for.

We built custom security model so that we can dynamically assign security at run time rather than design time.

Hope this helps.


__________________
Akesh Gupta
Light Speed Solutions, LLC.
If I rest, I will rust !   Let's share the knowledge !
JRecca

Registered:
Posts: 5
Reply with quote  #3 
Hi Akesh,

Thank you for your response!
Sorry for my delayed response, I was reassigned to a different project for a little while.

I will need to research refreshing the cache, that's not something I've needed to be before.
If you have some suggestions, that would be greatly appreciated too.

Thanks Akesh,

John

__________________
John Recca
VP Development
GG-One software, Inc.
JimiJ

Avatar / Picture

MVP Developer
Registered:
Posts: 1,954
Reply with quote  #4 
Hi John,

I would suggest that you notify the logged in user when there is a changed  in their security role assignment using SignalR then ask them to re-login.


Cheers,
Jimi J

__________________

  Jaime Jegonia
[jts_logo]

Iron Speed MVP Developer
 

". . . and whoever sows generously will also reap generously" 2 Cor 9:6

JRecca

Registered:
Posts: 5
Reply with quote  #5 
Hi JimiJ

That will not work for our application.

This application filters all data by the user's active company selection.
We are trying to design in security rights for the user for each company they are assigned to.

We do not want to force them to log out then back in each time they change their active company.
A user can (and will often) change the data for a specific company then switch to another company and either run reports or change data (if they have proper rights).

We currently have group rights for a user programmed into our application. This works great but it would be nice to expand it and allow a user to be assigned group rights for each company.

We've been asked for this feature for years and thought we would try to address it for them.

Thanks,

John

__________________
John Recca
VP Development
GG-One software, Inc.
JimiJ

Avatar / Picture

MVP Developer
Registered:
Posts: 1,954
Reply with quote  #6 
I don't see any problem with that. You can accordingly modify your security tables and override your security to dynamically apply the current group value at every loading of page.


Cheers,
Jimi J

__________________

  Jaime Jegonia
[jts_logo]

Iron Speed MVP Developer
 

". . . and whoever sows generously will also reap generously" 2 Cor 9:6

Previous Topic | Next Topic
Print
Reply

Quick Navigation:

Easily create a Forum Website with Website Toolbox.

Download Iron Speed Designer

Terms of Service Privacy Statement