Hi,

I had something simular and solved it quick and dirty by assigning roles in a settings dialogue for a specific instance (in this case a shop module) in an admin module (i have a shop admin module and a shop module). Read my question about that here: http://www.dotnetnuke.com/Community/Forums/tabid/795/forumid/111/threadid/261104/scope/posts/Default.aspx

I have this implemented by checking the roles a user is in and checking that with my custom shop permissions table.

     RoleController RC = new RoleController();
            ShopController SC = new ShopController();
            lstShop.Items.Clear();
            lstShop.Items.Add(new ListItem("...",""));
            foreach (ShopInfo SI in SC.GetShops(this.PortalId))
            {
                ShopPermissionController SPC = new ShopPermissionController();
                foreach (ShopPermissionInfo SPI in SPC.GetShopPermissionsByShop(SI.ShopId))
                {
                    if (this.UserInfo.IsInRole(RC.GetRole(SPI.RoleId, this.PortalId).RoleName))
                    {
                        lstShop.Items.Add(new ListItem(SI.ShopName, SI.ShopId));
                        break;
                    }
                }
            }

THis fills the dropdown box in the settings page of my shop module with the shops a user is allowed to edit. This is done with Roles. So what i currently do (it is not the most elegant solution) is add let's say 5 roles. And give the roles edit rights on the module but the role only sees the shops they areallowed to edit as set in the admin module settings.

HT

Alexander