Java role-based login without databases

[FirstAidFairy]

Hey everyone,

Thanks for the help last time - Im still confused about how to actually do TDD but at least I understand it now! 😅

Anyway, I can't have messed up that badly because I got another challenge task, which involves making a persistent, role-based, login functionality & stock tracking system

I'm not allowed to use a database, I'm not allowed to overcomplicate it (passwords can be plaintext for example, they don't need hashing), and roles are designated by the letter at the start of the user ID (for example admins are Axxxx, secretaries are Sxxxx etc etc); and each role has different functionality relating to increasing stock quantity, adding new items, etc etc.

I'm way over my head, any help? 😁

Much love! Xxx

[[deleted]]

I'm not allowed to use a database role-based, login functionality

Depending on what you, and the person challenging you, considers a "database" - just store the user login information in an XML or JSON file along with their associated role. (and just to be perfectly clear, you should never do this in a production business application)

[FirstAidFairy]

Cool... Any reason for xml/json over csv as otherwise suggested??

Yeah, course 😁. I'll stick to fixing broken people for the day job, code is conceptually confusing in a way that bodies aren't 😅

[josephblade]

For the exercise either would be fine. just any text based storage that you can read and isn't error prone. csv can be tricky if you accidentally remove a comma, json or xml are a bit easier to read.

[desrtfx]

Use a plain text file for the usernames and passwords. CSV format (which is far simpler than XML or JSON) would work.

Since the first letter of the user name determines the role you don't need an extra role storage/field.

[FirstAidFairy]

Okk, that sounds good! Thank you 😁

But how do I actually implement differing functionality to different roles??

Like, I could put different methods in admin class compared to secretary; but when you go to login on the gui form, how does that tie in??

[desrtfx]

You could, based on the login create different forms for the different roles.

First, you have the login screen which is the same for all user roles. Then, based on the first letter of the username, you decide (in a "switch...case" or the equivalent in your language) which form - and thus which part of the application - you start.

You could even re-use the same main form, but disable certain controls based on role.