Geek Answers Handbook

Lot model, permissions, customers and staff

We use a third-party model for booking applications, so that customers and employees can effectively use the same table in the database.

Previously, customers could only “book” a meeting if they paid, and if the slot was available. Now we want to create a type role premium_customerso that customers can place orders without payment and even in the absence of availability.

Does it make sense to add clients to the same security model, for example, in an ACL or RBAC?

  • If so, we will present the role normal_customerand premium_customertogether with our receptionand duty_managerand other staff roles?
  • If not, should there be a separate security model for website users?
+5
source share
2 answers

yes, it's fair to create another role for recording a premium customer

0
source

Since I do not know all of your requirements, I cannot give you a final solution, but your approach to creating a role may be correct in many cases. However, you can also create a “Subscription”, which may have a start and end date.

+2
source

More articles:


All Articles