Introduction

A User within SysCP-ng has two possibilities to gain Permissions. The first one is trough the role he is assigned to, the second one is trough individual right a user got assigned. Trough individual granted permissions a user only can gain more rights than he has already gained trough being in a certain group.

The Idea

The main idea behind this handling of permissions is, that a user might be a Webhosting Customer and is assigned to the role HostedCustomer. The HostetCustomer group now has permissions to access the FTP Module as well as the mySQL Module.
Let's say that the user Kenny has made a special deal with us about hosting Emails as well, but he is the only one of our 100+ customers who has this special deal. Creating a new group would be an overkill, but we can give the user Kenny individual rights to access the Email Module

Limiting Resources

On the one hand a user needs a permission to access modules, but he also need to have Resources. Resources are for example the number of FTP Accounts a User is allowed to have.

Groups

Groups are about aggregating User who need a certain set of Permissions. Note that we are not talking about LimitingResources?.