Creating an authenticate page

[sai]

Hi everyone,

I'm getting an error 200 when trying to add a new record. Does this mean I need an authenticate page? (login page) If so, is it possible to post the coding example? Thank you.

[Martin Brändle]

I would first check two things:

- in the FM7 database: the privilege set the fmxslt extended privilege was attributed to.

- the file permissions of the FM7 database itself.

[sai]

Hi Martin,

Thanks for you help. I think I worded incorrectly. I have two privileges set (full & guest access). What I read from the custom web publishing is that if you have the guest acct enable, all users are automatically log in as guest.

I notice there's a Re login script in the FM7 client itself. So what I'm trying to do is create a "Re login" page to change your status from guest to admin. As you can tell I'm new in xslt =)

[Martin Brändle]

Hmm. The only three ideas that come to my mind:

1. An additional database (e.g. login.fp7) with guest account disabled, but with an account/password for full access and a general key for a relation (portal) to the other database records. An xslt page that does a find within login.fp7 - then the browser must pop up with the login dialog. Probably works. Drawback: You have to work with portals in login.fp7 for all data to be displayed.

2. Similar to 1, but no relation, but a page redirect. Probably does not work.

3. Call your original page with http://name:password@host/fmi/xsl/...

Drawbacks: Password sent in clear text. Not allowed in MS Windows and for IE browsers.

[rindin]

Would it be possible to make use of a script containing the "re-login" function? The script would login a new user according to the inputs of 2 fields on the screen. One of the input types would be a password so that it wouldn't appear right on the screen.

I've created a script like this and it seems to work great with FM client or IWP, but I can't seem to get the script to function correctly using CWP with XSLT...

Any ideas?

[Martin Brändle]

According to the experience of Yvonne Garcia (http://www.fmforums.com/threads/showflat.php?Cat=0&Number=162974&an=0&page=0#162974), this does not seem to work.

-scirpt in CWP does only act on found sets. There is no other interaction, i.e. feedback back from the script to the WPE.

[Yvonne Garcia]

Thanks for the redirect to this thread, Martin.

Rindin, here is what I did to have guest access and also account-level access (based on Martin's suggestions):

Data.fp7 = guest account enabled, as well as each individual account. Restricting guest to certain layouts, fields, etc.

Input.fp7 = guest account disabled. Contains each of the other individual accounts. This contains a file reference to Data.fp7 so I'm able to get some initial functionality without duping data (such as limiting the initial record viewed to the one belonging to that user). After the initial stylesheet, the rest of them go back to referring data.fp7 so I don't have to recreate the rest of the layouts in this file.

This is testing well, with the password request coming up once someone gets to this stage. Only thing I still need to figure out is a "log-out" because my client would feel more secure with one. I think I'll play around with invalidating the session. I'm new to session work. Any ideas?

Thanks again,

Yvonne

[rindin]

Thanks for your response Yvonne!

I've had a chance to mess around a little bit with the 2 seperate FM files to solve the problem, and it seems like it may be a great way to fix it.

I just have one more question for you: do you need to place any duplicate data in the input file in order to access data in the data file? I noticed that I had to create some kind of a relationship between the 2 files in order to view data using the input file. This is a feature I'd like to have so that administrators can search records and update certain fields.

Thanks!

-Andrew

[rindin]

Actually disregard the previous message, I've gotten this to work great with no duplicate data at all.

Thanks again!

[ralph.nusser]

Can you post two example files with the xsl?

Thank you for your efforts.