How to menage user permission

Question

Hi all!
I'm developing a WEB application for menaging the information on the inside of an industry.
I use struts and JSF.
The problem is that I've different type of user that can connect to the server. (sell manager, engeneer, custumer, segretary...)
Every kind of user must have a diffrent level of access.
Example:the secretary can't access in the "engeneer" zone.
Another problem is:
for the same page,the user must see a different level of details.
Example:in the production page,the engeneer must see all the data,the chemical analist must see only the chemical analisis,and so on...
how can I structure the DB for managing that?
And how can I implement it?
What do you think about creating a level between the DAO to data and the application.
Every data have a specific permission to be see.
When a request for see the data comes,I match the required permission with the user permission.
If the user can't access to data, I throw an exception,that is catch above.
Anybody knows of any kind of articles on this argument?
Any advice?
sorry for my english.

Answer 1

Can I revoke this permissions once I grant?
You can use DROP and REVOKE commands to do the opposite.
USE [msdb]
GO
ALTER ROLE [SQLAgentOperatorRole] DROP MEMBER [TestLogin1]
GO
USE [msdb]
GO
ALTER ROLE [SQLAgentReaderRole] DROP MEMBER [TestLogin1]
GO
USE [msdb]
GO
ALTER ROLE [SQLAgentUserRole] DROP MEMBER [TestLogin1]
GO
use [master]
GO
REVOKE ALTER ANY CREDENTIAL TO [TestLogin1] AS [sa]
GO
Cheers,
Vaibhav Chaudhari
[MCTS],
[MCP]