capabilities of forthcoming group changes

[Joel Peshkin]

Jason Pyeron wrote:

>
>It seems that the current way of representing access control in Bugzilla is well 
>exceeded by situations like this. We have been doing the 1 product 1 
>customer approach, and we don't like it either. We developed an ACL system 
>similar to the NTFS file/directory permission system, but requires 
>sub-select/recursion at the SQL level (My-SQL does not support this yet?) 
>for Oracle/DB2. We store the groups/users as a graph, a user is a leaf 
>node.
>
><snip>
>
I think that general sentiment is universal, but I should add the 
following constraints....
a) It must be possible to migrate from 2.16
b) The very first place to consider the efficiency implications is in 
Search.pm.  

-Joel