Rightinheritance, rightdeletion dynamic removal of grouprights...

Hi,

 

I have a problem that I have thought quite some time about but have not been
able to solve. I have a situation with a pretty large app running Liveuser
with many groups, members and grouprights. The thing is that I have recently
run into a situation where I have a user that is member of a group that
assigns him +25 (group)rights. So far so good. The problem arises when I
would like the user to have 24 of those 25 rights but not the last one. 

 

I have figured two possible solutions but neither appeals to me due to the
negative consequences:

 

1. One way is to transform all the rights from grouprights into userrights
but I really don't see that as an alternative since that would exponentially
increase the need for user administration.

 

2. Second way is to implement "anti"-rights which negates the grouprights
but that calls for a structural change in the application and makes the
application more complex.

 

Is there some other solution I may have overlooked?

 

Thanks in advance (as always),

Jan Bolmeson

 

____________________________________________
Jan Bolmeson ([email protected])

M.Sc. Engineering Physic,  Zend Certified Engineer