DAFTools Security
(Limited documentation for web sites on web hosting server.)

Overview

If a database password was defined with the Web User Manager, it is necessary to enter the database password in any ASP script which needs to explore or modify the user list.

DAFTools offer several security features designed to be used on a server hosting several DAF databases. The purpose of DAFTools security features is to protect each database from administrators responsible for other databases. If these security methods are not used it is easy for an ASP developer to explore and manage users of any DAF users list.

DAFTools Security features are built around four Security Levels used to grant or deny access to DAFTools methods and properties.

DAFTools Security Levels

Four security levels are defined: Level0, Level1, Level2, Level3. Depending on which level is logged DAFTools methods will be usable or forbidden. Level0 gives the minimum rights and Level3 the maximum.

The DAFTools Security Levels are managed with several DAFTools Main object methods:

Remarks:

• A password is attached to each Security Level (no login is used).
• All security level passwords are DAF Database properties. In consequence, they must be defined for each database.
• Default password is "" (empty string).
• The password set with the Web User Manager is for "Level3"

ASP scripts available:

• SetLevelPassword.asp

Managing security in an ASP script

In most cases it is acceptable to use only security "Level3" and to log in (LevelLogin) at the beginning of the script and log off (LevelLogOff) at the end of the script.

Sample ASP code to log in and log off:

<%
Set DafTools = Server.CreateObject("dafinfo.dafinfo.1") 
DBName = DafTools.CurrentDB.name
DBPASSWORD = "testpass"

'--- Log In to DAFTools
if DafTools.LevelLogin(DBName,"Level3",DBPASSWORD) = FALSE then 
'-- Can't log In, the password is probably invalid
     response.write "Invalid database password <br>"
else 
     '--- Explore and manage here the user list 

     '--- We logoff ---
     DafTools.LevelLogOff
end if
%>

Error messages

When DAFTools denies access to a method or a property the reported error message is:

-------------------------------------------------------

Microsoft VBScript runtime error '800a0046' 

Permission denied 

/ibill/daftools30/dbtest.asp, line 31 

-------------------------------------------------------

Security Levels for all DAFTools properties and methods