Different password for Order processing

[gcrankshaw]

Is there a contribution that will allow a person to process orders but not change other settings.

[photofxplus]

Wow, you would almost need to write a new admin panel for that. Or add a function that checks password and user name then loads orders page without any other links if that password and user name is given. I do not know, but after gaining access to the admin panel the user may be able to type in a url and obtain total access to Admin - which may require something else to prevent redirect.

 

Or according to user_id - allow or disallow redirects from the orders category - that might work better..

 

So you would need to add a function that checks user_id on every page load inside the admin panel. This may be easier by checking user_id agaisnt the user_id who has total access (you). Since you know what that is already. I would guess this function would need to be called from every other page. (Placing the function on the application_top.php page may create a loop..)

 

function check_user_id() {

if ($_SESSION['admin']['id'] != 1)

tep_redirect(tep_href_link(FILENAME_ORDERS, tep_get_all_get_params()));

}

 

Something like that..

[satish]

Is there a contribution that will allow a person to process orders but not change other settings.

 

Well there is access level control admin contrib try that.

It allows to set file based permission.

 

Satish