Any good examples/references implementing ACLs via SQL?

Question

I currently have a web-application that implements a rudimentary form of ACL using UNIONs in mysql, but it's somewhat limited, and doesn't necessarily scale that well

I'm interested in any alternative ACL algorithms that could be implemented efficiently in SQL.

Thanks!

Answer 1

I've used this document as a model for implementing row level security in a Sql Server based CRM system. In my implementation, rows are made available to a given user based on their Active Directory group memberships.

The performance was surprisingly good when appropriately indexed.

http://msdn.microsoft.com/en-us/library/cc966395.aspx