What is the best design for security / permissions for parts of a website - is the data table wise?

Regarding Design:

  • Each user is included in the SOME group. (sales, parts, baseball players, whatever)
  • Each "web page" is perceived by a group of people. (sales + parts + joe in accounting that have received special permission).
  • Each web page, as a rule, is included in a group of web pages at some level - you can try to save them in some directory or start with some kind of prefix, but not always, i.e. when someone joins sales that you don’t want to specify, they see SalesPage1, SalesPage2, SalesPage3, SalesPartsPage1, etc.
+5
source share
2 answers

:

: ,

SecurityGroups: , "", "". (id, )

: (id, )

UserSecurityGroups: (userId, securityGroupId).

PageSecurityGroups: (pageId, securityGroupId, ). , .

, PageSecurityGroups , .

, , , , .

+10

" - -...", , , " - -..." - 1 !

:

--- > < ------- > < --- Pages

+3

All Articles