|
One way of implementing this would be to create a view with a "where clause" that restricts the rows returned to the specific user. You would then grant "select" access to only those views, not directly to the tables themselves.
Just a thought.
Remember to vote. 
|
|
|
|
|
Do you think this would work:
I have to views, for two tables, aspnet_Users and aspnet_Genealogy
I have the views already connect to the username which would the login, it shows all users with the one test data row which is the only entry at this point in time. Now would this "where clause" work,
UPDATE aspnet_genealogy
SET FamilyName, FirstName, MiddleName1
WHERE UserName=LoginStatus1;
and then a select,
SELECT UserName, FamilyName, FirstName, MiddleName1
FROM aspnet_Genealogy;
Do you think this would work?
Thanks
|
|
|
|
|
Thanks Smile |
I am trying to associate a Member with record that they created through a form that I have on the my site. I want the record to be associated with members profile as well as could be searched and selected by another member, but only a read only to this member who didn't create it but be able to select as part of his membership profile in a read only capacity.
I have two tables, aspnet_Users and aspnet_Genealogy, the code for the two tables are as follows:
CREATE TABLE [dbo].[aspnet_Users] (
[ApplicationId] UNIQUEIDENTIFIER NOT NULL,
[UserId] UNIQUEIDENTIFIER DEFAULT (newid()) NOT NULL,
[UserName] NVARCHAR (256) NOT NULL,
[LoweredUserName] NVARCHAR (256) NOT NULL,
[MobileAlias] NVARCHAR (16) DEFAULT (NULL) NULL,
[IsAnonymous] BIT DEFAULT ((0)) NOT NULL,
[LastActivityDate] DATETIME NOT NULL,
CONSTRAINT [PK__aspnet_U__1788CC4D0BC6C43E] PRIMARY KEY NONCLUSTERED ([UserId] ASC)
);
GO
CREATE UNIQUE CLUSTERED INDEX [aspnet_Users_Index]
ON [dbo].[aspnet_Users]([ApplicationId] ASC, [LoweredUserName] ASC);
GO
CREATE NONCLUSTERED INDEX [aspnet_Users_Index2]
ON [dbo].[aspnet_Users]([ApplicationId] ASC, [LastActivityDate] ASC);
CREATE TABLE [dbo].[aspnet_Genealogy] (
[GenealogyId] INT IDENTITY (1, 1) NOT NULL,
[FamilyName] CHAR (200) NOT NULL,
[FirstName] CHAR (200) NULL,
[MiddleName1] CHAR (200) NULL,
[MiddleName2] CHAR (200) NULL,
[MiddleName3] CHAR (200) NULL,
[Gender] CHAR (10) NULL,
[DOB] VARCHAR (20) NOT NULL,
[COB] CHAR (200) NULL,
[SOB] CHAR (200) NULL,
[COOB] CHAR (200) NULL,
[Newsletter] CHAR (10) NULL,
[DateTimeGenealogy] DATETIME NOT NULL,
[UserId] UNIQUEIDENTIFIER NULL,
PRIMARY KEY CLUSTERED ([GenealogyId] ASC),
CONSTRAINT [FK_aspnet_Genealogy_aspnet_Users] FOREIGN KEY ([UserId]) REFERENCES [dbo].[aspnet_Users] ([UserId])
);
The SP code is for these tables, aspnet_AddCenealogy and aspnet_UserGenealogy are as follows:
CREATE PROCEDURE [dbo].[aspnet_AddGenealogy]
(
@FamilyName char(200),
@FirstName char(200),
@MiddleName1 char(200),
@MiddleName2 char(200),
@MiddleName3 char(200),
@Gender char(10),
@DOB varchar(20),
@COB char(200),
@SOB char(200),
@COOB char(200),
@Newsletter char(200),
@DateTimeGenealogy DateTime
)
AS
BEGIN
INSERT INTO aspnet_Genealogy (FamilyName, FirstName, MiddleName1, MiddleName2, MiddleName3, Gender, DOB, COB, SOB, COOB, Newsletter, DateTimeGenealogy)
VALUES (@FamilyName, @FirstName, @MiddleName1, @MiddleName2, @MiddleName3, @Gender, @DOB, @COB, @SOB, @COOB, @Newsletter, @DateTimeGenealogy)
END
CREATE PROCEDURE [dbo].[aspnet_UserGenealogy]
AS
SELECT aspnet_Users.UserName, aspnet_Genealogy.GenealogyId
FROM aspnet_Users
INNER JOIN aspnet_Genealogy
ON aspnet_Users.UserId=aspnet_Genealogy.UserId
ORDER BY aspnet_Users.UserName;
RETURN 0
There have been two webpage that have been created Default.aspx and ResultsMembers.aspx, the code for these pages:
<%@ Page Title="" Language="C#" MasterPageFile="~/Main.master" AutoEventWireup="true" CodeFile="Default.aspx.cs" Inherits="_Default" %>
<asp:Content ID="Content1" ContentPlaceHolderID="head" Runat="Server">
</asp:Content>
<asp:Content ID="Content2" ContentPlaceHolderID="ContentPlaceHolder1" Runat="Server">
<link href="Styles/Content1.css" rel="stylesheet" />
<div id="content">
<br />
<span style="font-family: Arial, Helvetica, sans-serif; font-weight: bold; font-size: large; text-transform: uppercase"><center>Genealogy Membership Profile</center></span><br />
<br />
Please complete your "<span style="font-family: Arial, Helvetica, sans-serif; font-weight: bold">Genealogy Membership Profile</span>" to take full advantage of your free membership, please fillout the following information below and its FREE:<br />
<br />
<span style="font-family: Arial, Helvetica, sans-serif; font-weight: bold; font-size: medium">Family Name:
<asp:TextBox ID="FamilyName" runat="server" Width="200px"></asp:TextBox>
<br />
First Name:
<asp:TextBox ID="FirstName" runat="server" Width="200px"></asp:TextBox>
<br />
Middle Name:
<asp:TextBox ID="MiddleName1" runat="server" Width="200px"></asp:TextBox>
<br />
Middle Name:
<asp:TextBox ID="MiddleName2" runat="server" Width="200px"></asp:TextBox>
<br />
Middle Name:
<asp:TextBox ID="MiddleName3" runat="server" Width="200px"></asp:TextBox>
<br />
Gender:
<asp:DropDownList ID="Gender" runat="server" Width="100px">
<asp:ListItem>Male</asp:ListItem>
<asp:ListItem>Female</asp:ListItem>
</asp:DropDownList>
<br />
Date of Birth:
<asp:TextBox ID="DOB" runat="server" Width="200px"></asp:TextBox>
<br />
City of Birth:
<asp:TextBox ID="COB" runat="server" Width="200px"></asp:TextBox>
<br />
Prov. or State Birth:
<asp:TextBox ID="SOB" runat="server" Width="200px"></asp:TextBox>
<br />
Country of Birth:
<asp:TextBox ID="COOB" runat="server" Width="200px"></asp:TextBox>
<br />
Newsletter:
<asp:DropDownList ID="Newsletter" runat="server" Width="100px">
<asp:ListItem>Yes</asp:ListItem>
<asp:ListItem>No</asp:ListItem>
</asp:DropDownList>
<br />
<br />
<asp:Button ID="UpdateButton" runat="server" OnClick="UpdateButton_Click" Text="Update" />
<br />
<br />
</span></div>
<div id="ad"></div>
</asp:Content>
<%@ Page Title="" Language="C#" MasterPageFile="~/Main.master" AutoEventWireup="true" CodeFile="ResultsMembers.aspx.cs" Inherits="ResultsMembers" %>
<asp:Content ID="Content1" ContentPlaceHolderID="head" Runat="Server">
</asp:Content>
<asp:Content ID="Content2" ContentPlaceHolderID="ContentPlaceHolder1" Runat="Server">
<asp:GridView ID="GridView1" runat="server" AutoGenerateColumns="False" CellPadding="4" DataSourceID="SqlDataSource1" ForeColor="#333333" GridLines="None" OnSelectedIndexChanged="GridView1_SelectedIndexChanged">
<AlternatingRowStyle BackColor="White" />
<Columns>
<asp:CommandField ShowSelectButton="True" />
<asp:BoundField DataField="UserName" HeaderText="UserName" SortExpression="UserName" />
<asp:BoundField DataField="FamilyName" HeaderText="FamilyName" SortExpression="FamilyName" />
<asp:BoundField DataField="FirstName" HeaderText="FirstName" SortExpression="FirstName" />
<asp:BoundField DataField="MiddleName1" HeaderText="MiddleName1" SortExpression="MiddleName1" />
<asp:BoundField DataField="MiddleName2" HeaderText="MiddleName2" SortExpression="MiddleName2" />
<asp:BoundField DataField="MiddleName3" HeaderText="MiddleName3" SortExpression="MiddleName3" />
<asp:BoundField DataField="Gender" HeaderText="Gender" SortExpression="Gender" />
<asp:BoundField DataField="DOB" HeaderText="DOB" SortExpression="DOB" />
<asp:BoundField DataField="COB" HeaderText="COB" SortExpression="COB" />
<asp:BoundField DataField="SOB" HeaderText="SOB" SortExpression="SOB" />
<asp:BoundField DataField="COOB" HeaderText="COOB" SortExpression="COOB" />
<asp:BoundField DataField="Newsletter" HeaderText="Newsletter" SortExpression="Newsletter" />
<asp:BoundField DataField="DateTimeGenealogy" HeaderText="DateTimeGenealogy" SortExpression="DateTimeGenealogy" />
</Columns>
<FooterStyle BackColor="#990000" Font-Bold="True" ForeColor="White" />
<HeaderStyle BackColor="#990000" Font-Bold="True" ForeColor="White" />
<PagerStyle BackColor="#FFCC66" ForeColor="#333333" HorizontalAlign="Center" />
<RowStyle BackColor="#FFFBD6" ForeColor="#333333" />
<SelectedRowStyle BackColor="#FFCC66" Font-Bold="True" ForeColor="Navy" />
<SortedAscendingCellStyle BackColor="#FDF5AC" />
<SortedAscendingHeaderStyle BackColor="#4D0000" />
<SortedDescendingCellStyle BackColor="#FCF6C0" />
<SortedDescendingHeaderStyle BackColor="#820000" />
</asp:GridView>
<asp:SqlDataSource ID="SqlDataSource1" runat="server" ConnectionString="<%$ ConnectionStrings:ApplicationServices %>" SelectCommand="SELECT vw_aspnet_Users.UserName, vw_aspnet_Genealogy.* FROM vw_aspnet_Genealogy CROSS JOIN vw_aspnet_Users"></asp:SqlDataSource>
</asp:Content>
The code for the two pages, Default.aspx.cs and ResultsMembers.aspx.cs, is as follows:
using System;
using System.Collections.Generic;
using System.Linq;
using System.Web;
using System.Web.UI;
using System.Web.UI.WebControls;
using System.Configuration;
using System.Data;
using System.Data.SqlClient;
using System.Data.SqlTypes;
using Microsoft.SqlServer.Server;
public partial class _Default : System.Web.UI.Page
{
protected void Page_Load(object sender, EventArgs e)
{
}
protected void UpdateButton_Click(object sender, EventArgs e)
{
String strConnString = ConfigurationManager.ConnectionStrings["ApplicationServices"].ConnectionString;
SqlConnection con = new SqlConnection(strConnString);
SqlCommand cmd = new SqlCommand();
cmd.CommandType = CommandType.StoredProcedure;
cmd.CommandText = "aspnet_AddGenealogy";
cmd.Parameters.Add("@FamilyName", SqlDbType.Char).Value = FamilyName.Text.Trim();
cmd.Parameters.Add("@FirstName", SqlDbType.Char).Value = FirstName.Text.Trim();
cmd.Parameters.Add("@MiddleName1", SqlDbType.Char).Value = MiddleName1.Text.Trim();
cmd.Parameters.Add("@MiddleName2", SqlDbType.Char).Value = MiddleName2.Text.Trim();
cmd.Parameters.Add("@MiddleName3", SqlDbType.Char).Value = MiddleName3.Text.Trim();
cmd.Parameters.Add("@Gender", SqlDbType.Char).Value = Gender.Text.Trim();
cmd.Parameters.Add("@DOB", SqlDbType.VarChar).Value = DOB.Text.Trim();
cmd.Parameters.Add("@COB", SqlDbType.Char).Value = COB.Text.Trim();
cmd.Parameters.Add("@SOB", SqlDbType.Char).Value = SOB.Text.Trim();
cmd.Parameters.Add("@COOB", SqlDbType.Char).Value = COOB.Text.Trim();
cmd.Parameters.Add("@Newsletter", SqlDbType.Char).Value = Newsletter.Text.Trim();
cmd.Parameters.Add("@DateTimeGenealogy", SqlDbType.DateTime).Value = DateTime.Now.ToString();
cmd.Connection = con;
try
{
con.Open();
cmd.ExecuteNonQuery();
Server.Transfer("ResultsMembers.aspx");
}
catch (Exception ex)
{
throw ex;
}
finally
{
con.Close();
con.Dispose();
}
}
}
using System;
using System.Collections.Generic;
using System.Linq;
using System.Web;
using System.Web.UI;
using System.Web.UI.WebControls;
public partial class ResultsMembers : System.Web.UI.Page
{
protected void Page_Load(object sender, EventArgs e)
{
}
}
The Default.aspx is the first page that member goes to after the new member registers, he must fill out that form, this is the data I want to associate with member and also allow other members to search the aspnet_Genealogy table and be able to select and update their member profile. Only the member will be able to edit the profile that he created at the time of creation, it will be read only to other members other than selecting it to be added to their profile.
I have also a views code which is as follows:
CREATE VIEW [dbo].[vw_aspnet_Genealogy]
AS SELECT [FamilyName], [dbo].[aspnet_Genealogy].[FirstName], [dbo].[aspnet_Genealogy].[MiddleName1], [dbo].[aspnet_Genealogy].[MiddleName2], [dbo].[aspnet_Genealogy].[MiddleName3], [dbo].[aspnet_Genealogy].[Gender], [dbo].[aspnet_Genealogy].[DOB], [dbo].[aspnet_Genealogy].[COB], [dbo].[aspnet_Genealogy].[SOB], [dbo].[aspnet_Genealogy].[COOB], [dbo].[aspnet_Genealogy].[Newsletter], [dbo].[aspnet_Genealogy].[DateTimeGenealogy] FROM [aspnet_Genealogy]
The ResultsMembers.aspx is a gridveiw of which I assign my views table to vw_aspnet_Genealogy and joined aspnet_User, UserName, at which the results are showing all the UserName being associated with the one record that is in the aspnet_Genealogy table. I want to associate only the member that enter the original record and only have the record designated member who selects it through a search as part of a member profile that is read only, this member will not be the originator of the record.
Can any one help?
Thanks 
|
|
|
|
|
Member 9142936 wrote: Can any one help?
Does the user need to be the physical owner of the data? That implies that each potential owner is in the AD.
Does the user need to be "owner" in order to "not show" the data to other people besides the user?
Bastard Programmer from Hell 
If you can't read my code, try converting it here[^]
|
|
|
|
|
The user/member that enter the data thru the Default.aspx will be the "Owner", that means it automatically becomes part of his profile. I want that same data to be shown to other Users/Members, on a global basis but they can not edit the information, only select the data to become of their profile.
Thanks for your quick response and look forward to hearing from you soon.
Thanks
modified 12-Sep-13 10:01am.
|
|
|
|
|
Member 9142936 wrote: The user/member that enter the data thru the Default.aspx will be the "Owner",
That means that he doesn't need to "own" the data; he just needs access.
Member 9142936 wrote: I want that same data to be shown to other Users/Members, on a global basis but they can not edit the information,
There's still no need to mess around with ownerships. Simply don't provide an update-page if the user is viewing a record that he didn't enter.
Bastard Programmer from Hell 
If you can't read my code, try converting it here[^]
|
|
|
|
|
I agree if we look at from that point, the question I need to ask is since the default.aspx is the actual membership/user profile to start his family tree. Would it cause a problem since it is not classified on a ownership basis to the User/Member? The next step would be adding to the tree, (example: mother, father, maternal Grandfather and etc), I just want to make sure that the first data entry of the User/membership has a ownership and all other user/member will be able this data record can added on to another User/Member as part of their family tree profile. The procedures for the User/member to start, are as follow:
Step1: User/Member register. Register.aspx - done
Step2: Email sent to new user/member, Confirm.aspx - done
Step3: New User/Member confirm the link thru email confirmLink.aspx - done
Step4: New User/Member login in to website, login.aspx - done
Step5: New user/member starts building his Genealogy Tree, (user/member profile begins), default.aspx - done, this is user/member actual information.
Step6: Add to the genealogy tree, search the genealogy data table, aspnet_Genealogy, for instant Macdonald, a list of macdonald as a result, SearchResults.aspx, not done, with a select link, the User/Member takes ownership of the data record as part of his/her profile, but at the time the record can be claimed by another User/member.
This is what I am trying to accomplish, will that cause problems with the ownership of my user/members in future data record entries and data ownership for other user/member.
Thanks for your quick response and look forward to hearing from you in the future.
regards
|
|
|
|
|
Member 9142936 wrote: Would it cause a problem since it is not classified on a ownership basis to the User/Member?
You'd really need to explain what you mean with ownership; it's an ambiguous term, and it sounds more complicated than need be.
Some user enters "data" on a public website. Fine - who is the owner? And is the owner actually "owner" in terms of system administration?
FWIW, it sounds as if you're simply talking about a user and his data; like you'd be with a FaceBook account. The one who stores his/her info has read/write access, and there's some public view.
Member 9142936 wrote: the User/Member takes ownership of the data record
No. You do not "own" the records of the database of your local bank or your doctor. It's their data. Yes, you may be given a read-only view of their data - with some rights to personalize things like your password and your avatar, but that's it. Having you as a physical "owner" of the record would complicate things significantly.
Bastard Programmer from Hell
If you can't read my code, try converting it here[^]
|
|
|
|
|
I am sorry that I was not clear, what I am trying to do is I have a register user who is building a personal family tree, when the user registers, (this is complete), the user creates a password and username, after the user register he taken to a default page where the user starts entering data to build his tree. At this point in time the user can enter the data but he can not save it to his personal tree, that what I mean by ownership.
I want the user to be able to build the family tree by entering, saving and search the information in the database, it is a genealogy database. The Username and password is his personal genealogy tree in the database, that is what I call ownership of the personal genealogy tree.
Can you help me with this ownership part, I look forward to hearing from you and thank you for your patience, I am fairly new to this.
Thanks 
|
|
|
|
|
how to set automatice data backup in sql server 2005
|
|
|
|
|
|
You could always setup a SQL Job to run:
BACKUP DATABASE MyDB TO DISK = N'G:\SQLBackup\MyDB_Backup.bak'
WITH INIT, NAME = N'MyDB Backup', SKIP, NOFORMAT, COMPRESSION
|
|
|
|
|
It's a good site or not ? plz tell me any code project link
thanks
|
|
|
|
|
Do you want us to tell you how to carry out a sql injection attack, or how to prevent it?
=========================================================
I'm an optoholic - my glass is always half full of vodka.
=========================================================
|
|
|
|
|
|
Hi,
what is the best way to present a report, showing the dollar value per month for each salesperson in a certain region? Suppose we have Eastern and Western regions. Salesperson Sam, Sammantha, Roger,will
Should I use SSIS package for this purpose, or would a stored proc be able to create this same type of layout?
The report should look like, in an excel spreadsheet:
Region Salesperson Month(Total)
Eastern Sam $1050.00
Roger $100.00
Will $100.00
Total $1250.00
Western Sammantha $2000.00
Total $2000.00
Grand total $3250.00
Any ideas is appreciated!
thanks.
|
|
|
|
|
The UI (report layout) has absolutely NOTHING to do with the database. Use the stored proc to prepare the data for you.
Use the UI (excel or a reporting tool) to do the formatting and layout. You sub/grand totalling should be done in the reporting app, the pretty currency format belongs in the reporting app as well.
Never underestimate the power of human stupidity
RAH
|
|
|
|
|
Hello everyone! My name is Emmanuel. Please, I wrote a name dictionary program with visualbasic 6.0 using ms access 2003 as my database. I linked the database with the visual basic program using adodc control. In my system, the application runs fine. But when I installed the application in other systems and tried to run it, an error message will occur saying that the C:\Name dictionary\NameDict.mdb is not a valid path. Please help. Thanks in advance!
|
|
|
|
|
When you install it you must also provide the database file.
Depending on your app either it is a empty file or with some pre-existing data.
The file should installed relative to your code. And I suspect in the same directory is probably going to be best for you.
Then the way you connect must specify that. If you are using ODBC then you need to research the connection string/parameters to discover how to specify the file specifically.
|
|
|
|
|
You are in Switzerland, that is not a 3rd world country (you don't have the excuse that you cannot afford/access .Net tech), why the hell are you developing in VB6, the language is dead and is no longer supported. You should be using VB.Net express which is FREE and supported.
[edit] sorry I seem to be repeating myself [/edit]
Never underestimate the power of human stupidity
RAH
|
|
|
|
|
I'm fed up of my Ms SQL databases keeps on Disapearing from SMS ,and then keeps on coming back ..it is really frustrating ,is there any other database similar to ms sql which does not have any problem like this?
|
|
|
|
|
Well thats a new one, I have never heard this complaint about SSMS before, I suspect it is your environment rather than SSMS.
Never underestimate the power of human stupidity
RAH
|
|
|
|
|
|
chdboy wrote: I'm fed up of my Ms SQL databases keeps on Disapearing from SMS [..],is there any other database similar to ms sql which does not have any problem like this?
The IDE and the Database server are two distinctly different applications. What is dissapearing exactly? The alias as defined in SMS, the database (how? is it simply not visisble in the IDE, or is the actual physical file gone?)
MSAccess doesn't have this problem, but that's hardly a good replacement for Sql Server. Switching db-server will have more impact than simply a different IDE. FWIW, you can always download and use another IDE if you dislike SMS.
Bastard Programmer from Hell
If you can't read my code, try converting it here[^]
|
|
|
|
|
Are you using a SQL Express User Instance[^] (AttachDBFilename in your connection string)? These databases will automatically be closed and removed after a period of inactivity, which is why you can't see them in SQL Server Management Studio.
"These people looked deep within my soul and assigned me a number based on the order in which I joined."
- Homer
|
|
|
|
|
General 
News 
Suggestion 
Question 
Bug 
Answer 
Joke 
Praise 
Rant 
Admin 
Submit an article or tip
