Implementation of differentiation of access rights to the program

Question

C++ / C#

Hello.

There is a need to introduce into the program (it will allow you to copy strictly defined files over the network) a module for delimiting access rights. For example, for some groups of users, assign the rights to copy some files, for the second groups - others. Moreover, with the ability to edit the users themselves.

The program is written in C++. Has anyone had a similar task? How implemented? Where were the policies stored (groups, users)? In the db? Or in encrypted files?

I would be grateful for the concept and / or libraries with similar functionality.

Answer 1

By means of OS / FS - why reinvent the wheel? Or does the program have its own authentication module?