BookmarkSubscribeRSS Feed
Filipvdr
Pyrite | Level 9
Hello,

Person A runs a stored process and it displays in HTML an image from a folder:
SASStoredProcess/do?_program=%2FFAB%2Fenhanced_lot_hist_vars&pictureNr=2

img alt="" src="file://netapp1/vars/imageDB/0001/2.jpg"

Person A is allowed to see picture 2, but not picture 3. But now he just has to change the path and he has access to every picture in the folder.

Is there any good solution to prevent this? We searched for a few:
- copy the image to a local directory, and display that one (but then we have to clean that directory up and ... )
- we can set security groups on each image but here they change very fast so not really an option
- img alt="" SRC="//SASStoredProcess/do?_program=CheckIfAccessIsOK&pictureNr=2 " (dont know of such a thing is possible). We can see to which product this picture belongs, and we have a list who is allowed to see which product.

so my main question is: how to show the picture without really giving the possibility to the user of seeing where this picture is stored so he can not access all other pictures

EDIT: ANYONE?? Message was edited by: Filipvdr
2 REPLIES 2
twocanbazza
Quartz | Level 8
I gather the Pictures are static, ie not dynamic Graphs etc...
Filipvdr
Pyrite | Level 9
correct, static pictures

sas-innovate-2024.png

 

Time is running out to save with the early bird rate. Register by Friday, March 1 for just $695 - $100 off the standard rate.

 

Check out the agenda and get ready for a jam-packed event featuring workshops, super demos, breakout sessions, roundtables, inspiring keynotes and incredible networking events. 

 

Register now!

How to Concatenate Values

Learn how use the CAT functions in SAS to join values from multiple variables into a single value.

Find more tutorials on the SAS Users YouTube channel.

Click image to register for webinarClick image to register for webinar

Classroom Training Available!

Select SAS Training centers are offering in-person courses. View upcoming courses for:

View all other training opportunities.

Discussion stats
  • 2 replies
  • 812 views
  • 0 likes
  • 2 in conversation