I am currently useing role based security where each role has many permissions and the roles are attached to users. All this is stored in a database. So the structure is as such:
Joe Smith
---- Manager
---------Can manage users
---------Can manage event
The problem I am having is that this is to constraining as my portal has grown. I need to set permission in the objects that are created. When I say objects I mean the actuall events in a calender or a document that are uploaded. Rather then saying that the document can be viewed by the role of Manager I would rather have permissions on the document. For example
Document 1
--- Manager
--------View
--------Edit
--- Admin
--------View
--------Edit
--------Delete
--- User
--------View
So as you can see the permissions are not attached to the Role but the Object, Role and Permission makes up the securty. ...
Go to the complete details ...