Store access privileges in the user database (ColdFusion, ASP, JSP, PHP)
This building block is required only
if you want certain logged-in users to have different access privileges.
If you simply require users to log in, you don’t have to store access
privileges.
To provide certain logged-in users with different
access privileges, make sure your database table of users contains
a column specifying each user’s access privileges (Guest, User,
Administrator, and so on). The access privileges of each user should
be entered in the database by the site administrator.
In most database applications, you can set a column to
a default value each time a new record is created. Set the default
value to the most common access privilege on your site (for example,
Guest); then manually change the exceptions (for example, changing
Guest to Administrator). The user now has access to all administrator
pages.
Make sure each user in the database has a single access
privilege, such as Guest or Administrator, not multiple privileges
like User, Administrator. To set multiple access privileges for
your pages (for example, all guests and administrators can see this
page), set those privileges at the page level, not the database
level.