What is a correct way to define "Super powers" to user Roles

What is a correct way to define "Super powers" to user Roles

by anna ko -
Number of replies: 0

Hello people

will be happy to hear your thoughts regarding 2 different ways of Roles implementation:

 

Let's say we have a system Role named Viewer. This role suppose to provide the ability to see all the courses in the system.

Part of the viewres at the system, should have some additional "powers". Let's say it's posting to a forum and watching other's profile. There are 2 ways do define such a role:

way 1: to add another Role, named let's say Super Viewer & define all it's capabilities same as those for the Viewer but ALLOW posting in a forum and ALLOW watching other's profile.

way 2: to add another 2 Roles, one named let's say Forum Poster and other Profile Watcher. Forum Poster Role will have the capabilities for posting at the forum (only those!) and Profile Watcher will have only ALLOW at watching users profile capability. Then, any person who assigned to the Viewer Role and needs for more "powers" - will be also assigned to Forum Poster Role and Profile Watcher Role.

As i see way 2 is better, as it allows more flexibility and clearity for a complex-multi-users System.

Your opinion?

 

(it's regarding 1.9 version, didn't find the sepparation for the versions in the forum)

Average of ratings: -