any method to control column access

[phneoix]

hi,
i would like to know to know whether it is possibe to control the
column access for users. i am having multiple users accessing the same
table where i need to control the column access individually for each
user and generate the forms automatically based on the column
priviliges. is there any way to achieve this in web2py.

thanks

[mdipierro]

yes. for example:

# use the new group based authenticaion
auth=Auth(globals(),db)

# create a group
gid=auth.add_group('administrator')

# chose a user, for example the user logged in
uid=auth.user.id

# make the user member of the group
auth.add_membership(gid, pid)

# give members of the group a certain permission, let's call it
"edit_somefield" on db.sometable
auth.add_perimission(gid,"edit_somefield", db.sometable)

# explain web2py what "edit_somefield" mean
db.sometable.somefield.writable=auth.has_permission
("edit_somefield",db.sometable)

Hope this helps. I wish I had time to document this better. Hopefully
in a couple of weeks.

Massimo

[David Marko]

Its very usefull feature. Does it mean that field is not generate
using SQLFORM only or its not saved even when user submit this field
to server in any(spoof) way?

David

[mdipierro]

SQLFORM(db.sometable)

only displays somefield IF db.sometable.somefield.writable==True

and

SQLFORM(db.sometable, readonly=True)

only displays somefield IF db.sometable.somefield.readable==True

[phneoix]

thanks a lot mdipierro, column privileges working quite nicely.

is there any similar method for SQLTABLE whereby only columns with
readonly privileges are displayed.

thanks

[mdipierro]

db.sometable.somefield.writable==True

should work for SQLTABLE too. Does it not?

Massimo

[phneoix]

i have set permissions for individual fields and implemented them
successfully using
SQLFORM(db.sometable, writable=True)

but if i want to create a custom form it does not work.
eg: SQLFORM(db.sometable,fields=
['somef1','somef2','somef3'],writable=True) #somef3 is denied access

is there a way out.

and i could not find the syntax for SQLTABLE to do the same job of
hiding fields.

thanks

[mdipierro]

You can overwrite

db.table.field.writable=True or False

just before you call SQLFROM

[phneoix]

SORRY put my question in wrong way.

somefield1 and somefield2 have create permission. while somefield has
been denied access by me.

SQLFORM(db.sometable, writable=True) # it works here. sqlform
generates a form with somefield1 and somefield2.

but if i want to create a custom form it does not work.

eg: SQLFORM(db.sometable,fields=

['somefield1','somefield2','somefield3'],writable=True) #it fails
here. iam able to access all 3 fields

sorry for the trouble.

[phneoix]

CORRECTION

somefield1 and somefield2 have create permission. while

***somefield3*** has

been denied access by me.