Re: Users and Roles Confusion

I guess I'm just used to (probably naively) baking these things into the
domain. I've been reading up on rbac/abac/instance-based ac and whilst I
understand grouping activities/permissions into roles/profiles and testing
against activities etc... it's how this relates/replaces/complements
relationships between entities which confuses me. For instance, in my simple
scenario, if I'm testing whether the user (an Assistant) can view a Client,
I iterate through the Assistant's assigned Managers and in turn iterate
though their associated (owned) Clients until I find a match. No permissions
involved. This seems clunky and whilst I'm interested in adopting more
virtuous domain modelling practices (such as ddd) I'm getting blocked on
this.



--
Sent from: http://domain-driven-design.3010926.n2.nabble.com/


------------------------------------
Posted by: chambrenoire <[email protected]>
------------------------------------


------------------------------------

Yahoo Groups Links

<*> To visit your group on the web, go to:
    http://groups.yahoo.com/group/domaindrivendesign/

<*> Your email settings:
    Individual Email | Traditional

<*> To change settings online go to:
    http://groups.yahoo.com/group/domaindrivendesign/join
    (Yahoo! ID required)

<*> To change settings via email:
    [email protected] 
    [email protected]

<*> To unsubscribe from this group, send an email to:
    [email protected]

<*> Your use of Yahoo Groups is subject to:
    https://info.yahoo.com/legal/us/yahoo/utos/terms/