ACL and RBAC

Comparing #2 with #3

Revision #3 was created by kevinkorb kevinkorb on Jul 3, 2012, 1:47:48 AM.

fixed chilren (children) typos

Content

[...]
How the objects fit together
------------------
What the ACL-Extension does is basically to put the ACL-Objects (Aros, Aco) in two tree-hierarchies (in each tree are only objects of one type).
This implies that ACL-Objects can have parents and children, while children inherit the permissions of their parents.
Note that hierarchies are _explicitly_ supported for both Aros _and_ Acos. Also, each Aro and Aco can have _multiple_ parents. The depth of the hierarchy is unlimited, the lookup is non-recursive.


Permission Lookup Layers
------------------
[...]