HAP access restrictions

[magic2119]

How do i restrict HAP access to a small test group. I was thinking make a group called HAP and join the wanted users to the group and only allow that group access via HAP setup. however i cant find how to do that in HAPs setup page.

[nickbro]

Edit web.config

[magic2119]

Thanks Nick. Great program btw!

[Duke5A]

Edit web.config

 

Nick, I added this bit of code to the web.config file and it keeps out users who aren't part of that particular security group, but it still lets them logon in a way. They'll get the logout option, but will be dumped back to login prompt. Does this add to the count of currently logged in users, and is there a way to dump the user back an access denied screen? Thanks again.

 

Edited January 25, 2012 by Duke5A

[nickbro]

That code is correct.

 

It does not add to the log count, unless they try to log back in.

 

Users should get a unauthorised error message instead of being kicked to the logon screen when using the my files browser. (At least in the extended/v8 versions, should also work in the basic)

 

My Files v8:

 

Alert Message:

Access to the path '\\chs01.crickhowell.internal\Shared Area\Admin\Headship\' is denied

 

My Files Basic:

 

Redirected to unauthorised.aspx

 

My Files Extended:

 

Alter Message:

Access to the path '\\chs01.crickhowell.internal\Shared Area\Admin\Headship\' is denied

 

 

If a user attempts to access a part of HAP+ that they aren't allowed to e.g. to the booking system for a student, they should get dumped to the login screen

[Duke5A]

I'm sorry Nick, I should have clarified. I'm trying to deny students the ability to access HAP altogether. The problem I'm having is after adding that snippet of code to the web.config file in the root of the HAP folder, when attempting to log on as a student your kicked back to log on page without an access denied message. Also, that student's name is then shown in the upper right corner of the page with the log out option. This is what led me to believe the student was actually being logged on and counting against the quota.

[nickbro]

ok, i'll add some code to the login page for the next release to detect if the user is already logged in and display a warning message

[reggiep]

Edit web.config

 

Hi Nick, Could you let me know where this is now as the web.config file doesn't have in it OR do we add the whole snippit of code into our existing web.config?

 

Thanks

[nickbro]

Add it in to the web.config file near the other

[reggiep]

Hmm,

I half work if I put this in directly below

 

 

But I get a lot of internal errors and the drop down menu at the top stops working!

[nickbro]

Ok, Remove the above code

 

Look for

 

Change it to

 

Should be near the top of the file, inside the main

[reggiep]

That worked.

 

Thanks Nick