id	summary	reporter	owner	description	type	status	priority	milestone	component	version	severity	resolution	keywords	cc
59	New system for user groups and an RBAC system	WanWizard	WanWizard	"The current way of linking groups to other groups, and determining group inheritance, is implemented in a Q&D way. This should be changed. 

Also, an RBAC system needs to be implemented, in which you have users or groups, which are assigned a role. The assignment can contain filters on rows (i.e. give access to a subset of data), the role can contain filters on columns (i.e. data visibility), and should contain access rights for the different objects defined.

Probably, the code for database access (the query creation part) must be changed as well, so that all queries honour the RBAC rules."	enhancement	new	medium	8.0	ExiteCMS Core	7.2	Feature		core security