Roles, Permissions, Objects based access system

Question

I am looking to build a good access control system. I need support for roles, permissions, access objects, etc. I am looking for ideas/existing schema which could guide me to design the system. These are the general basic features.

1. Create users with multiple roles
2. User level fine tuning permissions
3. User access level to prevent users with lower access from creating higher level users

I am trying to use Zend Framework and looking forward to ideas. I have taken a look at Drupal's user management system, they support most of the requirements but not fine tuning permissions at user level. Everything is done at role level.

Answer 1

Role-based access control :)