Are there any plans to revamp the RBAC system? It doesn’t seem to follow a very intuitive pattern as roles are mixed in with permissions with no distinction between them.
All RBAC systems I have ever used have followed the same pattern where users (or accounts in TC’s case) have a many-to-many relationship to roles and roles have a many-to-many relationship to permissions. This provides a more straight-forward and intuitive relationship which also makes the code to model the system simpler and more understandable.
Yes, but the roles are mixed in with the permissions, correct? In other RBAC schemas, they are a separate entity and would constitute there being a separate roles table.
I suppose having the current schema makes it possible for a more simple implementation of your last point, since there would need to be a table to tie Roles to Accounts and another to tie any à la carte Permissions to accounts.
Do you know common it is to use that feature? I personally don’t see that getting much use but I’m not sure.
My only problem with how it sits now is that it seems difficult to tell what are roles and what are permissions.