you just have to figure out a logic where big-super-users can deal only 
with their own smaller-super-users, and another one where 
smaller-super-users can deal with their regular users. If this "logic" 
needs a mapping in a table or not, it's entirely up to you. 

On Tuesday, June 10, 2014 12:09:54 AM UTC+2, Alex Glaros wrote:
>
> I'd like to configure RBAC so that users can give other users permission 
> to give others access. 
>
> Do I need an additional table to do this or is it a matter of defining 
> another group in the regular auth-group, auth-membership, auth-permissions 
> tables?
>
> Example:  All U.S. states will have (a) big-super-users that can give (b) 
> smaller-super-users rights to give (c) regular users access.
>
>
>    - So I give big-super-users rights to authorize smaller-super-users.  
>    - There's one big-super-user for each state. 
>    - There are too many small-super-users for me to manage, so the 
>    big-super-users manage them. 
>    - Small-super-users would for example give each person in each city of 
>    the state they're responsible for, rights to access the system.
>    
>
> All I have to worry about is the big-super-users.
>
> Thanks,
>
> Alex Glaros
>

-- 
Resources:
- http://web2py.com
- http://web2py.com/book (Documentation)
- http://github.com/web2py/web2py (Source code)
- https://code.google.com/p/web2py/issues/list (Report Issues)
--- 
You received this message because you are subscribed to the Google Groups 
"web2py-users" group.
To unsubscribe from this group and stop receiving emails from it, send an email 
to [email protected].
For more options, visit https://groups.google.com/d/optout.

Reply via email to