admin user with varying priveleges

Hi,
Here's the use case we would like to have:

Define admin users in our ldap structure.  The admin users don't have
unlimited powers, though, as shark currently works.  A manager is
assigned to a certain group and they can [re/un]assign activities
to/from employees "under" them.  To do this, I figure I'll just write
another implementation of SecurityManager.  No biggie here.  What I'm
currently curious about is how to determine possible assignees of an
activity that has already been accepted by someone.  I'd like to give
the administrator a drop-down of all people who they may reassign the
activity to.  One way to do this would be to unassign the activity,
then get a list of assignments, then reassign it back to the orginal. 
However, this solution would be a concurrency nightmare.  Is there an
easier way to do this.  The other solution I tried was to get all the
users in a group, and then call the getActivities method for each of
them.  However, this   solution breaks if the user resides in multiple
groups.  Does anyone have any ideas?
Thanks,
Ben

--
You receive this message as a subscriber of the [email protected] mailing list.
To unsubscribe: mailto:[email protected]
For general help: mailto:[email protected]?subject=help
ObjectWeb mailing lists service home page: http://www.objectweb.org/wws