Resource Control approach...

[eluser]CodeSpeed[/eluser]
Thanks @li

The software is a billing / invoicing / product catalog / shipping management/ etc / etc / software and it will be used intranet only (locally, that is) and it will have a super-user that can give or take privileges and is the only who can decide on giving them, also is the only one who can create/edit/delete users.

All the users will be in the same building and in this case, and each of them won't have a reason to access areas of the software that don't belong to his job.

The worker who oversees "Product Returns" will only see "Create Product Return Entry" and related modules in his "Dashboard".

IF the super-user decides that he needs the same worker to also access the "Office Bathroom Cleaning Log", he will add that privilege to the user and THEN pick up the phone, dial "John's" extension and say "John, I have good news, and bad news", and John on his next login (if he doesn't quit) he'll see the "Office Bathroom Cleaning Log" in his menu.

Makes sense?

PS - Apologies if my english is a little cryptic, it's not my native language.