Hi gurus,
I have written a web site. Regarding seucrity, if a user logs in to the site, he will get an employee ID stored in session variable. With this, he can do view/add/modify his data including sensitive data all over the site as long as his role is allowed.
In addition, if an admin logs in to the site, he can choose an employee ID and he can update employees' details as well. The pages are shared together by admins and normal users but they are controled by Role based access. The change logs will be recorded against who makes changes etc.
I wonder wether I have to split pages into normal user pages and admin pages for the same/similar features. Please give me your valuable advise.
Thanks
Oliver
...
Go to the complete details ...