Hi,

I need an opinion... I'm working on a portal for a company group and i'm not sure what to do regarding role management.
The creation of users is done by the administrator, who can only create a user if he exists in the employees table. In order to accomplish that I have created a field in the registration page to filter all employees which have no user assigned. So far so good...

The problem is: the portal includes several applications to which I have to grant access to the users according to the company they belong to. Each application has at least 5 access levels and these levels are not the same for all the applications.
This is where the problem becomes quite complicated :s...

So, my question is: how should this access management be done?

I was trying to build one role for one access level at one application, but a user can be an employee in two companies and have the same access level to one application (the membership doesn't let me add a user to a role that was already added to another company); currently I'm putting the roles for the company and employee in a separate table.

Is it dificult to add some columns to the dnn_roles? and make the rigth changes to grant all the menbership? (in my case one user could be in the same role but in different companies

Any advices on how to accomplish this? Am I missing something here?

Thanks in advance for any help :)