roles and permissions

[matiu2]

Each user can have certain roles .. eg. admin, uploader, reviewer

Each role can have certain permissions .. eg. edit_content, upload_files, read_level1_content

Each content type can check those permissions, for example:

• to hit /article/new you need edit_content permission
• to hit /article/1 you need member permissions
• to hit /article/1/delete you need admin permissions

---

• There should be a simple registration system where you can hook it all up and store the hookups in your DB.
• There should be a bunch of reasonable defaults.