Users , Roles and Permissions are easy to understand. I think Groups are not as evident. Groups are not really groups of Users as you may think. Groups are whatever you want them to be depending on your problem domain. Examples:
Ex 1 - You have system where you manage several branch offices. In each branch you have a branch manager. You would make every branch a Group and "Manager" is a role. This way a User has the Role of Manager in a Branch (Group) but it is not a Manager in other branches. Ex 2 - You have a virtual store that sells pets. You have a cat department, a dog department, a snakes department. I fevery department is group the category manager (role) for each departament is a different person. Thus Juan is "Category Manager" for dogs and cats but Salma is "Category Manager" for snakes. A user can have a role but only in selected departments. If you want the user to have the role in every department you can by convention assign it to the group "Global". I hope this clarifies it. -- Humberto > -----Original Message----- > From: Rodrigo Reyes [mailto:[EMAIL PROTECTED]] > Sent: Monday, February 17, 2003 10:19 AM > To: [EMAIL PROTECTED] > Subject: Could someone explain the security service and the > DB schema a > little further? > > > Hi > I have been investigating the security service and looked > at the DB > schema which is shown at the site. We have been discussing it > here, but we > haven't been able to fully understand it. Could someone > explain it a little > better? How are users, groups and roles related? Why do they > have a ternary > relationship between them? Thanx > > > > --------------------------------------------------------------------- > To unsubscribe, e-mail: [EMAIL PROTECTED] > For additional commands, e-mail: [EMAIL PROTECTED] > --------------------------------------------------------------------- To unsubscribe, e-mail: [EMAIL PROTECTED] For additional commands, e-mail: [EMAIL PROTECTED]
