I am part of a team creating a web application using PHP and MySQL. The application will have multiple users with different roles. The application will also be used in a geo
I have similar solution to build and so far I've decided to use specifications and roles, so in fact one role would have some privilege specifications attached. If they all are satisfied, the permission is granted, otherwise - it falls back to the resource default access.
I was looking over to find someone already implementing the solution, but it seems no one did. Let's hope it won't be a fail :)