PDA

View Full Version : Access Control Design


juinjuin
03-14-2008, 11:36 AM
Hi

I would like to confirm the working mechanism of the permission system in vba Dynamics.

Based on my testing, it seems to operate on the conservative side. For example, if a user belongs to 2 different Usergroups, 1 with access to a category, another without, access would be denied based on the lower privileges of the usergroups.

Once I removed the usergroup with lower access privileges from the user, the user can access the category.

This is in contrast to that of vBulletin's permission system, which always gives access to a resource so long as 1 of the usergroups to which the user belongs have access privilege for that resource.

Can you confirm this behaviour? If so I would need to restructure my usergroups so that 1 user always have only 1 usergroup to preevent additional usergroups with lower privileges taking precedent.

Thanks!

Brian
03-15-2008, 12:24 PM
No, that is not the way the permissions work. If a member belongs to 2 groups and one of those groups has permission to access something then it does not matter if the other group does not.