access control churned users web application


i'am operative php + mysql amicable networking application, i need setup opposite opening control (read,create,edit,delete) tellurian (all items) and/or self equipment (item combined themselves) any way organisation specific user.



does anyone suggestions doing (table structures, etc)?






okay here i yield some-more detail, now i have tbl_module, tbl_user, tbl_user_role. any user purpose have opposite opening specific module.




  • read

  • update

  • create

  • delete



and devided tellurian opening self wholly (own comment annals combined themselves).



and tide approach: i emanate another list reason opening detail:




  • acl_uid

  • mod_id (fk way uid)

  • target_id (fk user uid purpose uid)

  • acl_type (user/role brand aim id reference)

  • acl_read

  • acl_update

  • acl_create

  • acl_delete



acl_read, acl_update, acl_create, acl_delete value ranges:




  • 0 deny

  • 1 allow

  • 2 ascribe devaluate priority check (if user value 2 following ascribe role)

  • 3 self only



i trust theres some-more fit proceed solve this, competence an alleviation tide approach.



thanks your responses.



Comments

Popular posts from this blog

list macos calm editors formula editors

how hibernate @any-related annotations?

why does floated <input> control floated component slip over too distant right ie7, nonetheless firefox?