BookmarkSubscribeRSS Feed
Filipvdr
Pyrite | Level 9
Hello,

Person A runs a stored process and it displays in HTML an image from a folder:
SASStoredProcess/do?_program=%2FFAB%2Fenhanced_lot_hist_vars&pictureNr=2

img alt="" src="file://netapp1/vars/imageDB/0001/2.jpg"

Person A is allowed to see picture 2, but not picture 3. But now he just has to change the path and he has access to every picture in the folder.

Is there any good solution to prevent this? We searched for a few:
- copy the image to a local directory, and display that one (but then we have to clean that directory up and ... )
- we can set security groups on each image but here they change very fast so not really an option
- img alt="" SRC="//SASStoredProcess/do?_program=CheckIfAccessIsOK&pictureNr=2 " (dont know of such a thing is possible). We can see to which product this picture belongs, and we have a list who is allowed to see which product.

so my main question is: how to show the picture without really giving the possibility to the user of seeing where this picture is stored so he can not access all other pictures

EDIT: ANYONE?? Message was edited by: Filipvdr
2 REPLIES 2
twocanbazza
Quartz | Level 8
I gather the Pictures are static, ie not dynamic Graphs etc...
Filipvdr
Pyrite | Level 9
correct, static pictures

SAS Innovate 2025: Call for Content

Are you ready for the spotlight? We're accepting content ideas for SAS Innovate 2025 to be held May 6-9 in Orlando, FL. The call is open until September 25. Read more here about why you should contribute and what is in it for you!

Submit your idea!

How to Concatenate Values

Learn how use the CAT functions in SAS to join values from multiple variables into a single value.

Find more tutorials on the SAS Users YouTube channel.

Click image to register for webinarClick image to register for webinar

Classroom Training Available!

Select SAS Training centers are offering in-person courses. View upcoming courses for:

View all other training opportunities.

Discussion stats
  • 2 replies
  • 1144 views
  • 0 likes
  • 2 in conversation