help with role based authentication

[eluser]jbreitweiser[/eluser]
A third and more powerful approach is a workflow based approach. You have a workflow for each action or set of actions you want a user to be able to accomplish. Then you have roles that collect each set of permissions based on.. well.. role. This role is then assigned to a user. Then on each action/form/function/whatever you check if the currently logged in user has the workflow for that action. Its more complicated but gives greater control.

There are more ways to make this more fine grain but unless there is a real business need for it its not worth the effort to implement.