3. Network Security
If you feel you need a separate database server to do this part, go ahead.
o If you need server space on the CSE server to host your site let me know.
o When the user tries to open the webpage, the user needs to be authenticated.
o Prompt the user for username and password.
o Find the hash of the user entered password and compare it with the stored hash value.
o If there is a match, the user should have access to the webpage
configurations as examples.
4. Role-Based Access Control
any resources/packages/libraries to do so.
o Manager
o Engineer
o Human Resources
o There can only be a single manager account.
o There can only be a single human resources account.
o There are no limitations on the number of engineer’s account.
o All users can view, edit, and delete their own file.
o Any file created by a user with an engineer’s account can view file created by another
engineer account.
o Any file created by the human resources account are confidential and not accessible to
other accounts.
▪ However, the human resource account can set a flag on a specific file so that it
can be viewed by the manager.
▪ Engineers cannot view this file under any circumstances.
o Any file created by the manager account are confidential and not accessible to other
accounts.
▪ However, the manager account can set a flag on a specific file so that it can be
viewed by a specified user – engineer or human resources.
0 comments