Order Fields in Section Access

[Anonymous]

Hi All,

I read that the sequence in section access is:

1. Check NTNAME, if TRUE then authorization work

2. If NTNAME is not applied then check USER ID and PASSWORD

In Summary: (Check NTNAME) OR (Check User Id and Password)

What I need is (Check NTNAME) AND (Check User Id and Password). Is this possible?

My case

With script below, if I enter Access Point using user ID = "U2" then I get role="P1" AND role="P2".

What I expect is I get role="P1" only

Section Access;

LOAD * INLINE [

    ACCESS, USERID, PASSWORD, NTNAME, ROLE

    ADMIN, U1, 123456,G1/U1, ALL

    USER, U2, 424232,*, P1

    USER, U3, 423131,*, P2

];

Section Application;

[ExpFlag]:

LOAD * Inline [

    ROLE, Ex1 , Ex2, Ex3, Ex4, Ex5, Ex6, Ex7, Ex8, Ex9, Ex10, Ex11, Ex12

    ALL, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1

    P1, 0, 0, 0, 1, 0, 0, 1, 1, 1, 0, 1, 1

    P2, 0, 0, 1, 0, 1, 0, 1, 1, 0, 1, 0, 1

];

Kindly need your advice.Thank you.

Best Regards,

Satria

[Mark_Little]

Hi,

I am no sure if you can user both user name and NTNAME in that way, but i haven't tried.

I reckon the problem is to do with the NTNAME '*' as you are saying all NTNAME have access to P2 and P3.

Maybe try '' or ' ', so it has no NTNAME?

Mark

[marcus_sommer]

AFAIK all features within the section access are in a and-relation to each other. This meant if you applied NTNAME and USERID + PASSWORD both will be used. To check this make sure that within the document-properties (tab open) section access is enabled (strict exclusion is heavily recommended) and that used real NTNAME - a wildcard makes no sense for user, not even for admin then normally there will be not many admins so that they could be placed with their NTNAME within the section access.

Mre informations could you find here: Section Access

- Marcus

[Anonymous]

Hi Mark,

Thank you for your suggestion. Let me try your idea.

Yes, you are right, I never see this case (combine NT and user name) in tutorial/books.

I use this approach as we have limited license user at this moment. So there are 2 kind users:

- Windows NT user ---> for top management

- user name+password --> for group users

After we buy additional license, I prefer all authorization using NT.

Thanks

Satria