StrataFrame Forum » StrataFrame Application Framework - V1 » Role Based Security » Is it possible to temporarily apply admin or last logged in user rights in order to close forms?

Is it possible to temporarily apply admin or last logged in user rights in order to close forms?

Cory Cookson — Tue, 25 Nov 2008 11:05:55 GMT

Scenario:

1) User 1 logs in with admin rights and opens up form1

2) Lock Screen happens due to timeout or pushing F11

3) User 2 logs in with lower rights than User 1

4) Here I want to close form1 so that User 2 has a fresh start with no open screens.

Question:

Is there a way to temporarily provide admin or the last users rights so that open forms can be closed programatically and then return to using User 2's rights?

RE: Is it possible to temporarily apply admin or last logged in user rights in order to close forms?

Ivan George Borges — Tue, 25 Nov 2008 11:05:55 GMT

Great, Cory! :cool:

RE: Is it possible to temporarily apply admin or last logged in user rights in order to close forms?

Cory Cookson — Tue, 25 Nov 2008 10:30:06 GMT

I believe that I've found a solution to the issue. Code snippets as follows:

[codesnippet]

public static void HandleCurrentUserChanged(object sender, EventArgs e)

{

if (_UserID.Length > 0)

{

_UserChanged = (_UserID != SecurityBasics.CurrentUser.UserName.ToString());

}

_UserID = SecurityBasics.CurrentUser.UserName.ToString();

if(_UserChanged)

{

for (int i = 0; i <= Application.OpenForms.Count - 1; i++)

{

MicroFour.StrataFrame.UI.Windows.Forms.BaseForm bf = (MicroFour.StrataFrame.UI.Windows.Forms.BaseForm)Application.OpenForms[i];

if (bf.Name != "Form1")

bf.Close();

}

private static void HandleBeforeSessionLock(object sender, EventArgs e)

{

for (int i = 0; i <= Application.OpenForms.Count - 1; i++)

{

MicroFour.StrataFrame.UI.Windows.Forms.BaseForm bf = (MicroFour.StrataFrame.UI.Windows.Forms.BaseForm)Application.OpenForms[i];

if (bf.Name != "Form1")

{

if (bf.EditingState == MicroFour.StrataFrame.Business.BusinessEditingState.Editing)

{

if (MicroFour.StrataFrame.Messaging.MessageForm.ShowMessage("unsaved data detected",

"Do you want to save your changes to " + bf.Name, "", MicroFour.StrataFrame.Messaging.MessageFunction.YesNo, MicroFour.StrataFrame.Messaging.MessagingIcon.Question,

MicroFour.StrataFrame.Messaging.MessagingSounds.DefaultSound) == MicroFour.StrataFrame.Messaging.MessageFunctionType.Yes)

bf.Save();

else

bf.Undo();

}

[/codesnippet]

RE: Is it possible to temporarily apply admin or last logged in user rights in order to close forms?

Cory Cookson — Mon, 24 Nov 2008 14:54:38 GMT

Thank you for the replies! I really appreciate the support of the forum.

I am making sure that the first user has saved or reloaded all data that they are working on before they are logged out.

I've tried recalling LockSession in the afterSessionLock event and it just brings up the login form again.

I want to close the open forms without the second user even knowing they were open.

There are however times that another person will login with equivelant rights and they should be able to see all of the screens that were left open by the first user.

As always any help is appreciated :)

RE: Is it possible to temporarily apply admin or last logged in user rights in order to close forms?

Dustin Taylor — Mon, 24 Nov 2008 09:56:03 GMT

Once you change the user you will have to call LockSession again to refresh the form states. You'll have to account for this in your AfterSessionLock logic, however, to prevent it from getting into an infinite loop.

That said, this isn't what I would recommend to handle the issue of unclosable locked forms. The session locking works the way it does for a reason, namely that users lower privileges should not be able to tamper with the work done by users of higher privileges (including discarding changes made by the administrator). That is why they have the different levels, to prevent one from having access to the other. As such, if you want to avoid the situation where an administrator logs out, and then a standard users logs in and can't close some open forms, I would recommend enforcing the administrator to save and close their work before logging out, rather than upping the permissions of the standard user to allow them access to explicitly denied forms or functions.

RE: Is it possible to temporarily apply admin or last logged in user rights in order to close forms?

Ivan George Borges — Mon, 24 Nov 2008 05:53:32 GMT

Hi Cory.

Have you also tried Greg's advice, and worked on your Login form? Since we are fighting the normal behavior of the SessionLock, working on your Login form could give you some flexibility to take care of actions.

RE: Is it possible to temporarily apply admin or last logged in user rights in order to close forms?

Cory Cookson — Sun, 23 Nov 2008 21:03:34 GMT

bump

RE: Is it possible to temporarily apply admin or last logged in user rights in order to close forms?

Cory Cookson — Fri, 21 Nov 2008 16:02:05 GMT

yes I've tried it but it doesn't seem to reset the security on the forms so that they are no longer disabled.

RE: Is it possible to temporarily apply admin or last logged in user rights in order to close forms?

Cory Cookson — Fri, 21 Nov 2008 16:00:40 GMT

yes it doesn't seem to affect the fact that the form has already been disabled.

RE: Is it possible to temporarily apply admin or last logged in user rights in order to close forms?

Ivan George Borges — Fri, 21 Nov 2008 12:34:14 GMT

OK. Now, in the AfterSessionLock, before dealing with your open forms, have you tried something like:

RE: Is it possible to temporarily apply admin or last logged in user rights in order to close forms?

Cory Cookson — Fri, 21 Nov 2008 12:06:44 GMT

yes, in the beforesessionlock I make sure that any form that has unsaved changes gets taken care of so that in the afterSessionLock event all that should have to happen is I close the open forms if it is not the same user.

RE: Is it possible to temporarily apply admin or last logged in user rights in order to close forms?

Ivan George Borges — Fri, 21 Nov 2008 09:46:30 GMT

Hi.

I see you worked your code in the AfterSessionLock. Have you tried managing your users in the BeforeSessionLock too?

RE: Is it possible to temporarily apply admin or last logged in user rights in order to close forms?

Cory Cookson — Fri, 21 Nov 2008 07:07:38 GMT

This doesn't make sense to me. I'm able to switch users on the fly and the particular user I am swapping to does show as admin.

Is there a way at this point to tell security to reload so that the forms are not disabled?

It just feels like I'm missing something simple here (or not explaining myself well enough) :hehe:

RE: Is it possible to temporarily apply admin or last logged in user rights in order to close forms?

Greg McGuffey — Thu, 20 Nov 2008 17:31:20 GMT

I'd look into a custom login form. Then you could set a flag that the session timed out (before session timed out event), then test for that when the user logs back in...they'll use your login form to do it, so you could test there if the user is changing after a time out and handle the forms before logging the new user in.

This also suggests an enhancement request: CurrentUserChanging event, which might be cancelable.

RE: Is it possible to temporarily apply admin or last logged in user rights in order to close forms?

Cory Cookson — Thu, 20 Nov 2008 15:11:50 GMT

I have gotten this far in the AfterSessionLock event:

[codesnippet]

SFSUsersBO sfs = new SFSUsersBO();

sfs.FillByUserName(_LastUserLoggedIn);

SecurityBasics.CurrentUser = MicroFour.StrataFrame.Security.LoggedInUser.CreateNew(sfs);

[/codesnippet]

This gives me back the user who had previously logged in but the form I want to close is still disabled and will not close :w00t:

As always all feed back is appreciated.

RE: Is it possible to temporarily apply admin or last logged in user rights in order to close forms?

Cory Cookson — Thu, 20 Nov 2008 14:34:09 GMT

These are great suggestions. Thank you both.

Let me try to explain again.

If a user with the same rights logs in after me they should see all of the forms still open. However, if a user with less rights logs in then all forms should close for that user.

This is an issue because by the time the CurrentUserChanged or AfterSessionLock events fire the new user does not have rights to close the open forms.

Is there a way to temporarily create and login an admin user behind the scenes to close the open forms and then restore the user logging in or a way to temporarily elevate the users rights to admin, close the forms and then return the users rights to what they were before i modified them?

or.....am I missing something silly:hehe:

RE: Is it possible to temporarily apply admin or last logged in user rights in order to close forms?

Trent L. Taylor — Thu, 20 Nov 2008 09:56:44 GMT

And/or the CurrentUserChanged event:

[codesnippet]MicroFour.StrataFrame.Security.SecurityBasics.CurrentUserChanged[/codesnippet]

There is also a BeforeSessionLocked event. Between all of these you should be able to implement your logic.

RE: Is it possible to temporarily apply admin or last logged in user rights in order to close forms?

Ivan George Borges — Thu, 20 Nov 2008 09:09:04 GMT

Hi Cory.

Guess you could add a handler to AfterSessionLock and take care of your open forms in it. But what if you have uncommited changes to be saved?

Maybe, in your MDI form Load:

[codesnippet]

AddHandler MicroFour.StrataFrame.Security.SessionLock.AfterSessionLock, AddressOf HandleAfterSessionLock

[/codesnippet]

Then:

[codesnippet]

Public Sub HandleAfterSessionLock(ByVal sender As Object, ByVal e As EventArgs)
'-- check if there are open forms and take your actions

End Sub
[/codesnippet]