Re: Security design questions

2011-11-28 Thread Mike Dewhirst
Javier Thank you - that looks great. I'll start coding ... Cheers Mike On 29/11/2011 1:24am, Javier Guerra Giraldez wrote: On Mon, Nov 28, 2011 at 2:21 AM, Mike Dewhirst wrote: 1. Do I have to create many-to-many relationships and before serving a page make sure the user making the request

Re: Security design questions

2011-11-28 Thread Javier Guerra Giraldez
On Mon, Nov 28, 2011 at 2:21 AM, Mike Dewhirst wrote: > 1. Do I have to create many-to-many relationships and before serving a page > make sure the user making the request is "permitted" to see it? that's how i've done this in the past. it's not too much burden. in my case, i had several image

Security design questions

2011-11-27 Thread Mike Dewhirst
Can someone please help me with a design dilemma? The scenario is multiple companies each with their own users to edit corporate information. Companies have divisions each with their own assets and associated information. I'm envisaging at least one corporate admin who can adjust anything for