I have an existing website built on the WAMP platform & using the Codeigniter framework (with Grocery_CRUD), that allows customers to make bookings for couriers to pickup goods and then allows the couriers to enter their daily run details.
Currently there is no security that controls access to the drop down menus on the Website and some of these drop down menus allow changes to tables in the database that only certain people should be able to change.
I require security to be added to some of the dropdown menus - approximately 4 drop down menus - that will prompt a user for a password when they try to access a drop down menu that connects to a sensitive table in the database.
Certain drop down menus may also require different passwords as certain users will be given the ability to change data in some sensitive tables but not others. Therefore I require the creation/setup of three passwords that control access to the dropdown menus/tables:
Password0 Admin password - All 4 secured Dropdown Menus)
Password1 Ability to access 2 specific drop down menus only
Password2 Ability to access the other 2 specific drop down menus only
a) Not all dropdown menus will be secured
b) I only want a user to enter a password to access a secured dropdown menu, not a username.
c) The Website still needs to function as it is now for normal users as normal users do not need to access the secured dropdown menus.
d) Normal users cannot be requested to enter a password when accessing non-secured areas of the website.
e) The passwords can simply be stored as another table in the database and I do not require Active Directory authentication.
f) I need to be able to easily change the Passwords
g) I need to be easily able to change which secured dropdown menus Password1 & Password2 allow access to.
h) I am looking for simple frontend security on certain dropdown menus of the website to prevent normal users accessing those dropdown menus.
i) Please see attached screenshot for an example of what I am looking for - the user clicks on 'Options' then selects the 'Courier Run Code' drop down menu and they are then asked to enter a password.
System Details -
WAMP Server 2.2
Windows Server 2008R2 64bit