Access Levels

[rick_it]

I have 4 types of users:
1) administrator - full control
2) president - allowed to READ anything
3) sales director - allowed to READ/WRITE/DELETE any record for any of the
agents he supervises
4) sales agent - allowed to READ/WRITE/DELETE only those records pertaining
to his area

Which is the best way to go:

1) All the users (admin, agents, directors, etc) in the same table

tblUsers
intUserID (PK)
txtUserName
txtPassword
intAccessLevelID (FK)

tblAccessLevel
intAccessLevelID (PK)
txtAccessLevel

2) Two different tables, one for the agents and one for their supervisors.
In this case where should I put the admin and president?

tblAgents
intAgentID (PK)
txtUsername
txtPassword
intDirectorID (FK)

tblDirectors
intDirectorID (PK)
txtUsername
...

Thanks for any help

Rick

 

[Rick B]

Not sure what you mean here. Are you using the built in user-level
security? If so, you don't need tables to deal with your security. You
certainly don't want to store passwords in your tables. Access has
facilities to deal with security including passwords, and object access.

 

[rick_it]

Rick,

actually I was not thinking of using the built in user-level security. This
database will be interfaced to the web using asp or asp.net.

Rick