I am currently rewriting my admincp for a site for the use of multi users.
So the site had a couple of sections
etc
Now I want to give some groups specific actions (Read, Write, Change, Delete)
- Admins, can do all
- News posters Full, can do all news actions (RWCD)
- Agenda posters Full, can do all agenda actions
- Agenda posters Add, can add agenda.
etc etc
How can I create a good working permission system ?
I have read about Bitwise, but that was not recommended (not dynamicall enough).
Also I thougt about creating a table
ID
USERGROUPID
PAGE
PERMISSIONS
1, 2 (admins), news, 1111
2, 3 (news posters), news, 1100
With this I can check on the group beloning to the user and on what he can do.
Example
Admins can access news.php, news_add.php, news_edit.php, news_del.php
News posters can access news.php, and news_add.php, but not news_edit.php and news_del.php (0).
Hope someone give a hint, because I am totally lost in the permission system 😃