I am designing logical model for web application security module. I don’t think I got it right. Please help me with perfect design.
Requirements:
1) Application consists of various modules
2) Each application screen (user interface/html) is assigned to a module
3) Each screen has its own functions (insert, update, delete, report, search,....)
4) Each user is assigned to a particular user group
5) Group has restricted access to assigned modules only
6) Group is granted access to particular screen function (within allowed modules ONLY)
7) User inherits module-screen-function access from his group definition
8) Need flexibility of giving extra screen function access to selected users (within allowed modules for his group)
9) Login audit
View current model:
http://api.ning.com/files/E*jlyIo*9z8gZubhMKBMkbGWIGQ0JITnuotGmmLn6lmkZE7lTOf6qJTqMMMSB2F9gwOIQAauDHR0l4HHD8Z2pYM4uddLJcGl/securitylogicalmodelV1.0.pdf