Access Privs set by Company Admin

[mr_vodka]

Hi,

I am going into unchartered waters. I am unfamiliar with more complex access privileges. In the past I have set up accounts with FM6, and accounts with even more limited access with FM7 in my solutions, but I am not sure how to limit it and still give an IT admin to change the privileges. (possibly access table etc)

In other words, I would like to create an interface where I can give a company IT admin access to add, change, and delete accounts but without giving him full access privileges so he does not go through the "Define Access & privileges" menu.

So, lets say I created an account control panel for the IT admin where he could create, delete, and change user privileges. Then I create a whole bunch of privilege sets with different options.

How can I change a user's privilege set based on what the admin chooses in this control panel?

Is the only work around to run a script that performs a check each time the user click a button, runs a script, or goes to a new layout, etc, instead of using the built in Access Privilege's feature in FM7/8 ?

TIA.

Edited September 12, 2005 by Guest

[Reed]

there's no way to change an account's privilege set w/o using the dialog, so you'd have to script deletion of the account, followed by creation of the account with a new privilege set. The password would have to be reset at that point though since you can't pull the password out with a script. (Unless you stored it in the database when it was created... not a good idea though)

You can dynamically specify account names and passwords from data in a user table, but you can't do this with privilege sets, so you'll have to specify a static privilge set in each script step, and then enclose the step in an If[] block to control which privilege set is used.