I know this has been asked before numerous times but has never really had a full answer.

I know little of the Authentication process in DNN but have played around trying to pick it to pieces to get what i am requiring. I know there is someone out there who can help with this and i really would appreciate your comments.

There are two distinct kinds of users the per portal user and the host or admin users differing by their scope of access to parent and child portals. The only thing i can see that differentiates the multi portal host users from the single portal users is the WHERE clause in SQL statements e.g.

WHERE  UserId = @UserId
 AND    (PortalId = @PortalId or IsSuperUser = 1)

What i want to achieve is a system whereby if a user is added to the installations Parent portal (i.e. portal 0) then they would have access to ANY of the child portals on that install. If however they are added to a child portal then they should be restricted to that child portal only. So a clause something like...

WHERE  UserId = @UserId
 AND    (PortalId = @PortalId or IsSuperUser = 1 or PortalId = 0)

whereby a user would be returned if their portal is equal to that of the @portalId, are a superuser or were created in portal 0

So if anyone knows the authentication system well in DNN and if modifying the sql statements might work as the basis for what i want to achieve (even just in theory) please let me know ASAP. Even if this idea is a complete load of *^&%$ then do you have any other ideas.

I have tried a number of user migration and sync modules but they just fall short on the most basic of installs requiring so much user maintenance.