Security for malls with different webmasters

This WebDNA talk-list message is from

1998


It keeps the original formatting.
numero = 16656
interpreted = N
texte = I am evaluating WebCatalog for use in a small mall. The mall consists of several shops. Each shop has its own directory, templates and database.Every one of the shops has its own webmaster with FTP access to his (and only his) directory. The problem is: Every webmaster has full rights to his directory (to update his own sites). This means he could write a template that can manipulate the data in the database in another directory/shop, couldn't he?Is there any way to prevent that and still allow full access to the directory? What about commands like CopyFile or DeleteFile? Can they be switched off completely or kept from working outside their parent directory?---- Rainer Hofmeister rhofm@webkom.co.at Associated Messages, from the most recent to the oldest:

    
I am evaluating WebCatalog for use in a small mall. The mall consists of several shops. Each shop has its own directory, templates and database.Every one of the shops has its own webmaster with FTP access to his (and only his) directory. The problem is: Every webmaster has full rights to his directory (to update his own sites). This means he could write a template that can manipulate the data in the database in another directory/shop, couldn't he?Is there any way to prevent that and still allow full access to the directory? What about commands like CopyFile or DeleteFile? Can they be switched off completely or kept from working outside their parent directory?---- Rainer Hofmeister rhofm@webkom.co.at Rainer Hofmeister

DOWNLOAD WEBDNA NOW!

Top Articles:

Talk List

The WebDNA community talk-list is the best place to get some help: several hundred extremely proficient programmers with an excellent knowledge of WebDNA and an excellent spirit will deliver all the tips and tricks you can imagine...

Related Readings:

no [search] with NT (1997) A question about security (1998) + character mystery (2003) [WebDNA] paypal (2009) WebCat2b15MacPlugIn - [authenticate] not [protect] (1997) Searchable WebCat (etc.) Docs ? (1997) Re(2): SSL, WebSTAR, WebCatalog (1998) RE: Lookup Notfound (1998) price formula (1999) sorting and grouping (1998) Passing Variable (was How to add product size) (1997) ShipCost Data Base (1998) credit card services (1997) RE: ANother SHOWIF problem (1997) Emailer port change (1997) Max Record length restated as maybe bug (1997) Language definitions and convertion (2000) Shared conversion under WebTen (1998) using showpage and showcart commands (1996) NetSplat and WebCat2 (1997)