Hi All,,,
i have a web application that has users and groups objects.
each user should belong to at least one group so that he/she can log in to the system.....
NOW, all features and modules of the application can be viewd and accesed by all users...
and now i want to put design for the security so that not all modules are accessed..or according to the user group privileges it can be accessed/viewed or not...
i read about the role based security...
my application has modules whre user can add, edit, delete or just view the object(contact info, task, case, etc...)
i need an advice whta is the best approach or model to implement this....
shall i give the privelge of the groups and so the user will have the same privileges??? what if i want to give a certain user some other privileges other that his group prvileges...
please give your advices and ideas...
many thanks
&n ...
Go to the complete details ...