PHP App User Permissions Tecnique

From: Date: Fri, 15 Oct 2004 07:41:31 +0000
Subject: PHP App User Permissions Tecnique
Groups: php.general 
Request: Send a blank email to php-general+get-199566@lists.php.net to get a copy of this message
I am building a web based community forum type software using PHP. I am currently working on how different user privelages are handled. Each user is part of a group and each group has varying degrees of privelages. I need to add in functionality which at the begginning of every script check the permission level of the user accessing the page. There are about 15 different permissions. I am debating whether i should store all the permission abilities into session variables and they can quickly be checked throughout the script, or whether i should query the database to check to see if the user has adequate group permissions to perform a certain function. Could someone give me some advice as to which would be more advisable?

« previous php.general (#199566) next »