 |
<PREV NEXT>
Web Applications Page and Folder Security
The Alpha Five Web Security system now
allows setting permissions for pages and files in multiple folders. Security set at
the project folder level can now be added to all files and folders under that
project. This allows placing files in various subfolders, as well as setting
security on specific files or file types in those subfolders.
Alpha Five now has a new Page and Folder Permissions form.
Select any page, file, or folder from the list and right click to set the
permission. A legend on the list shows the current status of a page or file.
Double Click on a folder to select the folder and show all files in that
folder.
Permission for a Specific Page or File
- A
specific file or page can be set as "allowed" or "requires login" regardless
of the folder.
- A
page set as "allowed" will always be allowed, regardless of any permissions
set at a folder level or for the file type.
- A
page set as "login" will only be permitted if a user is logged in with
appropriate permissions to see the groups assigned to the page. If a user does
not have permission, the page will always be denied regardless of any
permissions set at the folder level or for the file type.
- A
page without permission will only be allowed if the file type is allowed, or
the file is in a folder that allows all files.
Security by File Type or
Extension
- Permissions for file types by extension can be set at a global level.
- Permissions set globally apply to all files in the project, regardless
of the folder location. Additional security may be set at the folder level.
- Some global file types are set by default in the system, such as
JavaScript and CSS files. These file types can either be "allowed" or
"denied", but can not be removed from the file type list.
- Additional file types can be added at the global level and can be
"allowed" or "require login".
- A file
type set as "login" will only be permitted if a user is logged in with
appropriate permissions to see the groups assigned to the file type. If a user
does not have permission, that file type will always be denied regardless of
any permissions set at the folder level.
All Files in
Folder
- Permissions can be set for all files in a folder.
- All files in the folder can be "allowed" or "require login"
- If
the folder is "allowed", all files in the folder are allowed.
- Files in a folder requiring "login" will only be permitted if a user is
logged in with appropriate permissions to see the groups assigned to the
folder. If a user does not have permission, files in the folder will not be
allowed.
- Folder
permissions are NOT checked for any pages or files in the folder that have
permission set at the page level to "allow" or "login". Page permission takes
precedence over folder permissions.
File Types
in a Folder
- Permissions can be set for specific file types in a single folder.
- Files types can be "allowed" or "require login"
- A file
type set as "login" will only be permitted if a user is logged in with
appropriate permissions to see the groups assigned to the file type. If a user
does not have permission, that file type in the specified folder will be
denied.
|
