View Single Post
  #67 (permalink)  
Old 11-18-2008, 05:36 PM
koen koen is offline
Junior Member
 
Join Date: Nov 2008
Posts: 2
koen is on a distinguished road
Default Re: Fine Grained Role Based Access Control (RBAC) system

Quote:
Originally Posted by ben View Post
Domains are collections of objects. In your case you will have the following objects:
- post
- draft
- premium
- pending

Based on these objects you can create domains. And it is not as complex or large as it seems. (The system is meant to efficiently deal with thousands of objects and actions).
From the examples in the first post I understand that domains and objects do not refer to domain models and business objects (as in the model layer of a MVC approach). So in order to determine whether a user can view a post I would create a postModel and translate its properties (such as being a draft, pending etc) to the objects defined in the RBAC system.

Am I right so far?
Reply With Quote