Restrict admins to certain areas?

Is there a way to restrict an admin to certain areas of the site?

For example, I wish to allow someone access to the catalog area for product entry but not to other areas of the admin.

There is an Admin Profiles contribution in the Downloads area which adds support for this.

That was perfect!

In case anyone else is interested, the link to Admin Profiles is: http://www.zen-cart.com/index.php?main_page=product_contrib_info&cPath=40_41&products_id=86

Thank you very much DrByte. :)

Hi dudes

this solution is brilliant!

(make sure to install the sql patch through the admin area before uploading the files, from the link above!)

I have a question! is it posible to restrict specific products for admin uses as well?

Is there any way of customizing the admin home page and provide a link on it for individual admin users?

Many thanks

Matt

http://www.designsdirect.co.uk

provide a link on it for individual admin users?

Interesting suggestion but may I ask where would the link points actually ? To which page would you link to point the URL for these specific admins from the index page exactly ?

i would want a specific user to have acccess to only one product! so the link would be directed to a single product that they can update themselves!

when an admin user updates their product i have put a simple redirect code at the end of the denied.php file inside the admin profiles download!

This is following an idea to create a recruitement agency website using the zen cart!

Hum ... I guess this request is really for implementing into the admin profiles MOD. If so, I believe the author of that MOD could help you out under her / his official topic.

However, I do have a little suggestion.

<meta HTTP-EQUIV="REFRESH" content="0; url=http://www.yourdomain.com/admin/index.html">

replace with:

<?php echo zen_redirect(zen_href_link(FILENAME_DEFAULT, '', 'NONSSL')); ?>

:wink2:

designsdirect:

i would want a specific user to have acccess to only one product! so the link would be directed to a single product that they can update themselves!When an admin user logs in a session variable with their admin_id is created.

You could read this session variable to determine which user has logged in and use a conditional or switch statement in admin/index.php to present them with just a link to their product.

However, you would have to set each link up individually (or write more complex code to create database entries) and this would not prevent them from experimenting with the URL to access other products.

and this would not prevent them from experimenting with the URL to access other products.

There's a possibility of blocking this utility from unauthorized admin IDs actually. Perhaps I could create an individual restricted products MODs so that only authorized admins would be able to either, update or delete that particular product if needed.

TheOracle:

Perhaps I could create an individual restricted products MODs so that only authorized admins would be able to either, update or delete that particular product if needed.Many people have requested this but I have deliberately not included it in Admin Profiles. There are two reasons for this:

1. the aim of AP to restrict access to admin functions not to individual categories or products
2. other add-ons mod the product and category files and AP would thus clash with them if it went there too creating a maintenance and support nightmare
   Doing this as a stand-alone mod would therefore be a much better approach that avoids point 1 and minimises point 2. I look forward to seeing your mod when it's ready.

Doing this as a stand-alone mod would therefore be a much better approach that avoids point 1 and minimises point 2. I look forward to seeing your mod when it's ready.

Very well. Added this on my to-do list. I will probably integrate this feature into the additional products fields MOD (of course - if in demand from that topic). Otherwise, I could create it separately.

Hi there... this looks to be a great contribution, exactly what I was looking for. Great work and thank you.

Just a wee quick qu tho. When I downloaded the files and opened the install.txt in notepad it is all bunched up. Where there should have been a new paragraph instead there was a little box.

I had to go through the text and reorganise it myself.

While this isn't anyone else's problem and of course I'm grateful that the text was there at all but I just wondered if anyone else was having the same problem and if there was something i was doing that i could avoid doing that would stop this.

Its happened with the last few mods i've dl'd too.

thanks

barricades:

When I downloaded the files and opened the install.txt in notepad it is all bunched up. Where there should have been a new paragraph instead there was a little box.It's a problem that I have too and is about how the rather basic Notepad app handles end of line characters.

In my more recent mods I've stopped using .txt files and put all the installation notes in HTML files. When opening other people's and my older .txt based files I never use Notepad and instead use the vastly superior (and free) Notepad++.

Thanks for the prompt reply, i'll check that out.

One other wee question tho. If i replace the admin.php and english.php files as per the instructions then will they not get overwritten when i upgrade in the future?

Is that sort of "par for the course" in using mods, that you have to reinstall them everytime you upgrade? Could they not use the overrides system?

cheers

barricades:

If i replace the admin.php and english.php files as per the instructions then will they not get overwritten when i upgrade in the future?

Is that sort of "par for the course" in using mods, that you have to reinstall them everytime you upgrade? Could they not use the overrides system?Yes they are at risk of getting over-ridden, and the changes to them would need to be re-applied.

That is "par for the course" for mods that over-write admin files as the over-rides system does not yet extend to the admin area.

In reading this thread, I see now where it says to install the sql before uploading the files. I did not do that, unfortunately. And I do not believe I have any prefix set up... I'm sorry! I am just learning all of this.

Now I have this error...
1146 Table 'mommamad_zc2.zen_admin_menu_headers' doesn't exist
in:
[select id from zen_admin_menu_headers where header = 'Configuration']
If you were entering information, press the BACK button in your browser and re-check the information you had entered to be sure you left no blank fields.

Is there any way of fixing this? Or will I have to resort to uninstalling ZC and reinstalling?

I am using 1.3.7.

Thank you so much for your help and advice. I certainly do appreciate all the work someone went through to create this mod, as it sounds like one of the best features I have seen so far!

DodgeGirl:

In reading this thread, I see now where it says to install the sql before uploading the files. I did not do that, unfortunately. And I do not believe I have any prefix set up... I'm sorry! I am just learning all of this.

Now I have this error...
1146 Table 'mommamad_zc2.zen_admin_menu_headers' doesn't exist
in:
[select id from zen_admin_menu_headers where header = 'Configuration']
If you were entering information, press the BACK button in your browser and re-check the information you had entered to be sure you left no blank fields.

Is there any way of fixing this? Or will I have to resort to uninstalling ZC and reinstalling?It shouldn't be necessary to re-install Zen Cart. Unfortunately though, you haven't told us whether or not you have now installed the SQL patch, so it's not possible to say whether your problem is due to the absence of the table named in your error message, or the misnaming of it. Without knowing this it's not possible to advise as to the best way forward. BTW, you are using a database prefix of "zen_".

kuroi:

It shouldn't be necessary to re-install Zen Cart. Unfortunately though, you haven't told us whether or not you have now installed the SQL patch, so it's not possible to say whether your problem is due to the absence of the table named in your error message, or the misnaming of it. Without knowing this it's not possible to advise as to the best way forward.

Sorry. The SQL I installed was the install_admin_profiles. I did upload the files within "Extra - Patch Files" prior to installing the SQL as well as all of the Admin files.

"BTW, you are using a database prefix of "zen_". "

Ohh.. Thank you!! I am sure that will be very useful to know in the future! Appreciate you pointing that out.

DodgeGirl:

Sorry. The SQL I installed was the install_admin_profiles. I did upload the files within "Extra - Patch Files" prior to installing the SQL as well as all of the Admin files.

"BTW, you are using a database prefix of "zen_". "

Ohh.. Thank you!! I am sure that will be very useful to know in the future! Appreciate you pointing that out.In that case, I suspect that you have run the SQL without allowing for your database prefix. If you access your database directly using a tool such as phpMyAdmin, I suspect that you will see about four entries at the top of the table list with no prefix. If you edit their names to add "zen_" at the beginning, this will hopefully clear your problem.