SQL: How to implement a user model with individual rights and at the same time being in a group that sets the initial rights?

Question

MySQL

How to implement a user model with individual rights, which at the same time is in a group that also sets the rights for the user?
Is it correct to design using a table of individual rights, or to implement all types of rights through groups?

Answer 1

The nested permissions set always override the existing permissions of the current level (directories, groups/partitions, etc.) if they are overridden by new ones.
Otherwise (if the current and new ones do not overlap), the rights of the current level are valid without changes.
This is done through permission masks using the merge operation - a direct replacement of the bits of the access mask through a sequential check from the top to the bottom (to the current one being checked) over all the masks encountered.
For rights, you always need to use a separate rights table (ACL), and the objects for granting rights and the rights themselves should already be set in related tables.
Access control - should be centralized and understandable!

Answer 2

look towards RBAC