Application Development Tips with Different Permissions

Question

Does anyone have tips on developing an application that requires that each user be assigned a permission level. The permission level will determine which features are available to the user.

Any tips?

How would you (you) use such functionality in your application?

Answer 1

First you need to find out what functionality you want to cover with your permission system, and in what detail:

• Access to tables (list, CRUD)

• Functions / Modules

• Record Level Access (= ACL)

• Positive (grant) or negative (recall) semantics

• What is the admin role that you are allowed to do

, , , / -/-///, .

, /.

SQL.

, (, "public", "private", "" CMS) .

, NTFS, , , , , .

+ /, , .

Answer 2

ER Turbogears, Python. , . .

:

• ( ). , , . , View - - -.
• , , , , ( MVC).

MVC ( Turbogears ).

alt text http://jaivikram.verma.googlepages.com/temp.jpeg

Answer 3

, , ( -?).

, , , . , .

Answer 4

, "". , , , .

. , . , "" - ( , "", "", "", " ", " " ..). . , (, Java).

( ), . , , .

In your design, you can visualize / document the access control system as a matrix (roles for privileges).