🚀 go-pugleaf

Hi all

I have been working on a database application for about 12 months now - the 
app was deployed abut 6 months ago - I belive that the users are happy with 
performane.

Time has now come to refactor certain aspects of the app - and I am keen to 
address some shortcomings in the area of application security and access 
rights.

In particular, I need to be able to control users access rights to certain 
menu items in the application - for example, administrators need 
unrestricted access, supervisors need access to the maintenance screens, 
users need access to a more restricted set of menus.  The access rights need 
to be ontrolled on a user by user basis not just on a role basis.

I am looking for suggestions on how best to implement the required security 
features. Pointers to relevant resources and design patterns would be most 
welcome.

One area that is particularly challenging, is how to control access to nodes 
in a tree data structure - this needs to be highly configurable - some users 
can access the whole tree; others just a restricted set of nodes.

All suggestions welcome.

db