View Single Post
  #40 (permalink)  
Old 10-04-2007, 11:50 AM
ben ben is offline
Administrator
 
Join Date: Mar 2007
Posts: 91
ben has disabled reputation
Default Re: Fine Grained Role Based Access Control (RBAC) system

Quote:
Originally Posted by mithras View Post
That is exactly my problem :P Groups instead of users is not my problem.

I'm a member of the board of a student music corporation from the Technical University Delft (from The Netherlands). We have members (a group ;-) ), an orchestra (subgroup of members), a choir (subgroup of members), wings (subgroup of orchestra), strings (subgroup of orchestra), wood wings (subgroup of wings). And so on...

So I would be very happy if you know a solution for my problem. Thanks in advance, I'll wait patiencely :-)

A few days later.... I think we have to look at the problem a little differently.
Rather than trying to nest groups of people I would create relevant roles.

A user can have multiple roles. And a role can have multiple privileges.

So create as many roles as you like and assign users to those roles.

I know this is not 'ideal' but it would be simple and fast, even though some data would be repeated several time.
MySQL can deal with millions of records effortlessly this would not be a problem.

So I would create the following roles:

'General member'
'Orchestra member'
'Choir member'
etc...

So when a user signs up to your account you can assign them all three roles if you like.

Aleternatively you could create a table called group_roles which would have a one to many relationship with the roles table, so that you could define 'mega' roles and assign users to these 'mega' roles. This I believe would solve all your problems, but may not be worth the extra work...

I hope this helps.

Ben
Reply With Quote