user data for login

[t4nu]

Hi,
In the training material there is an example for security (login in).
In that example, the user enter the username and password then the username entered be used as the criteria to query the table. If the user is exist and the password matched then the user is allowed to access the application.

Is that the common practice in ebase? What is the different between the user that stored in the table we created with the user that managed by server admin app?
Thanks in advance for the help.

[Jon]

There isn't very much difference, they are both stored in a database. Ebase comes supplied with a built-in security system and this is maintained using the server admin app in V5. But you can also use any external security system as well. Plus you can implement your own using database tables - as in the training example.

[t4nu]

In order to access the built-in security system is just from server admin app and cannot from (say) my own program (what I mean with access are; adding new user, change user password, get current login user, etc).

Are there any built-in function to:
* check if user is login in or not
* get current login user's name
* get current login user's role
* change current user's password

Thanks.

There isn't very much difference, they are both stored in a database. Ebase comes supplied with a built-in security system and this is maintained using the server admin app in V5. But you can also use any external security system as well. Plus you can implement your own using database tables - as in the training example.

[Steve]

You can get to the security manager via Javascript to access things like username, whether a user is logged on etc...

Code: Select all

  system.securityManager.getUserName(); //return the username
  system.securityManager.isUserLoggedOn(); //return true if user is logged on
  system.securityManager.hasRole(name); //check user has a particular role

I do not think that there is a way to change the password through the API.

Kind regards

Steve

[t4nu]

Thank you, Steve.
Is there any document with complete description about those system.security things?

You can get to the security manager via Javascript to access things like username, whether a user is logged on etc...

Code: Select all

  system.securityManager.getUserName(); //return the username
  system.securityManager.isUserLoggedOn(); //return true if user is logged on
  system.securityManager.hasRole(name); //check user has a particular role

I do not think that there is a way to change the password through the API.

Kind regards

Steve

[Steve]

Here is a link to the documentation regarding runtime security:

http://dev-docs.verj.io/ufs/doc/Securit ... cation.htm

[t4nu]

Sadly there is no function to add a new user
I really need it for auto register system that we currently develop.

You can get to the security manager via Javascript to access things like username, whether a user is logged on etc...

Code: Select all

  system.securityManager.getUserName(); //return the username
  system.securityManager.isUserLoggedOn(); //return true if user is logged on
  system.securityManager.hasRole(name); //check user has a particular role

I do not think that there is a way to change the password through the API.

Kind regards

Steve

[t4nu]

Thanks a lot, Steve.
Is there any step by step tutorial how to implement the logon service?

Here is a link to the documentation regarding runtime security:

http://dev-docs.verj.io/ufs/doc/Securit ... cation.htm

[kotinkarwak]

Hi,
I have used MySQL database tables in own implementation of security (or at least what I have understood of security thus far). This will allow to achieve user registration and profile management like password reset etc. Still crude and will tidy it up and share files.
If you need a walk-through, think best to share deskop and speak through it I guess.

[t4nu]

Then if you already shared it. Please, let me know.
I believe many will get benefit from it.

Hi,
I have used MySQL database tables in own implementation of security (or at least what I have understood of security thus far). This will allow to achieve user registration and profile management like password reset etc. Still crude and will tidy it up and share files.
If you need a walk-through, think best to share deskop and speak through it I guess.

[kotinkarwak]

Will make that project available. Let me go through the documentation of the code and tidy up.

working through this

https://docs.google.com/document/d/1y18 ... sp=sharing