Hi, currently in our cms we have a very basic role structure where a user can belong to one role and each role has a bunch of permissions (usually assigned by adding a web.config in the appropriate folder with the correct permissions since i use security trimming in my menu). However my boss is pressuring me to improve this so that it offers more flexibility. The simplest idea is to keep the role permissions fixed but allow a user to belong to more than one role. However this still doesn't meet his need. My next idea was to configure the different permissions against the role, ie whether they can authorize a document. He prefers this idea but i can't think how to implement it. Would i need to overwrite the web.config files on the server as the role permissions are changed or is there a more elegant way.
Appreciate your help.
...
Go to the complete details ...