HAP access restrictions

[magic2119]

How do i restrict HAP access to a small test group. I was thinking make a group called HAP and join the wanted users to the group and only allow that group access via HAP setup. however i cant find how to do that in HAPs setup page.

[nickbro]

Edit web.config

 <location path="default.aspx">
        <system.web>
            <authorization>
                <allow roles="HAP Users" />
                <deny users="*" />
            </authorization>
        </system.web>
    </location>

[magic2119]

Thanks Nick. Great program btw!

[Duke5A]

Edit web.config

 <location path="default.aspx">
        <system.web>
            <authorization>
                <allow roles="HAP Users" />
                <deny users="*" />
            </authorization>
        </system.web>
    </location>

Nick, I added this bit of code to the web.config file and it keeps out users who aren't part of that particular security group, but it still lets them logon in a way. They'll get the logout option, but will be dumped back to login prompt. Does this add to the count of currently logged in users, and is there a way to dump the user back an access denied screen? Thanks again.

[nickbro]

That code is correct.

It does not add to the log count, unless they try to log back in.

Users should get a unauthorised error message instead of being kicked to the logon screen when using the my files browser. (At least in the extended/v8 versions, should also work in the basic)

My Files v8:

Alert Message:

Access to the path '\\chs01.crickhowell.internal\Shared Area\Admin\Headship\' is denied

My Files Basic:

Redirected to unauthorised.aspx

My Files Extended:

Alter Message:

Access to the path '\\chs01.crickhowell.internal\Shared Area\Admin\Headship\' is denied

If a user attempts to access a part of HAP+ that they aren't allowed to e.g. to the booking system for a student, they should get dumped to the login screen

[Duke5A]

I'm sorry Nick, I should have clarified. I'm trying to deny students the ability to access HAP altogether. The problem I'm having is after adding that snippet of code to the web.config file in the root of the HAP folder, when attempting to log on as a student your kicked back to log on page without an access denied message. Also, that student's name is then shown in the upper right corner of the page with the log out option. This is what led me to believe the student was actually being logged on and counting against the quota.

[nickbro]

ok, i'll add some code to the login page for the next release to detect if the user is already logged in and display a warning message

[reggiep]

Edit web.config

 <location path="default.aspx">
        <system.web>
            <authorization>
                <allow roles="HAP Users" />
                <deny users="*" />
            </authorization>
        </system.web>
    </location>

Hi Nick, Could you let me know where this is now as the web.config file doesn't have <location path="default.aspx"> in it OR do we add the whole snippit of code into our existing web.config?

Thanks

[nickbro]

Add it in to the web.config file near the other <location path="" />

[reggiep]

Hmm,
I half work if I put this in directly below <!--File Upload Limits-->

<location path="default.aspx">
<system.web>
<authorization>
<allow roles="GRP_HAP_ACCESS" />
<deny users="*" />
</authorization>
</system.web>
</location>

But I get a lot of internal errors and the drop down menu at the top stops working!

[nickbro]

Ok, Remove the above code

Look for

 <authorization>
      <deny users="?" />
    </authorization>

Change it to

 <authorization>
      <allow roles="GRP_HAP_ACCES" />
      <deny users="*" />
    </authorization>

Should be near the top of the file, inside the main <system.web>

[reggiep]

That worked.

Thanks Nick