>  * A profile is a set of permissions with a name.
>  * A user may have several profiles in each app.
>  
>  So:
>  
>  * USER is associated with a person actually hitting pages.
>  * APP or SYSTEM is a group of related pages.
>  * ROLE or PERMISSION is the ability to perform an atomic activity.
>  * PROFILE is a set of ROLEs with a name.
>  * A tuple <user,app,profile> means that user has all the
>    roles in that profile when hitting pages in that app.

Since ROLE is a group of PERMISSIONs, why intoduce PROFILE which is a group
of roles? Roles should be enough...

>  
>  Maybe this should be extended to allow for one page to belong
>  to more than one app?

Could you explain? I am not sure I understand what you mean...

fedor.





_______________________________________________________
Say Bye to Slow Internet!
http://www.home.com/xinbox/signup.html



------------------------------------------------------------
To subscribe:        [EMAIL PROTECTED]
To unsubscribe:      [EMAIL PROTECTED]
Search: <http://www.mail-archive.com/turbine%40list.working-dogs.com/>
Problems?:           [EMAIL PROTECTED]

Reply via email to