Hi,

I'm looking to implement a highly granular security model into our site.  We're using DotNetNuke Professional 6.2.2.  The site will service an entire industry- multiple companies, multiple locations within each company, multiple job positions within each company, and multiple products within each company.  We need to control what content people can see on the site based on any combination of all of the above dimensions.  We have a database design completed to allow for the granularity required, but we know that DotNetNuke automates a lot with Users and Roles and we don't want to overthink this or reinvent the wheel.

Does anyone have any thoughts on general strategy for this?  I've written DotNetNuke sites before, but nothing this custom.  I realize my conceptual understanding may or may not be making sense here, so please, any direction you can provide is greatly appreciated :) 

Thank you!

Joe

Good call :)

For example:
We are essentiall providing cloud based data management services to companies that operate and partner with airports.

Everything is centered around servicing the airline passenger, but in a variety of ways. For example- airport operations themselves (fuel, aircraft servicing), as well as ground transportation, hotel accomodations, food delivery, etc....

The airport operators vary greatly in size - some own hundreds of airports, some own just a few. Some airports are large, some small. There are people at each airport that need to see different subsets of data for only that airport. There are executives that need to see all data for all airports, or one particular region of airports Also critically important is that one airport operator cannot see any data belonging to a different airport operator, as they will often times be in direct competition with one another.

The airport partners and vendors will also need to see data, too - but often only for a specific flight or subset of flights of only one airport operator, but not necessarily just one airport operator (a ground transportation vendor, for example, in Chicago, could provide services to OHare or Midway airport, but each airport operator doesn't necessarily want to provide them the ability to see ALL flight information, but rather just the information for the flights they are providing services to).

We have what we believe to be a solid, normalized database design for this- but we aren't sure how to integrate this into DotNetNuke in the most efficient manner.

Any insight or direction would be greatly appreciated. Thanks you very much!!