Security Model Design

[matthias]

Ok, I'm desinging an interface to add more security to my OS. I have a user and a group interface. The user interface is just to keep track of users and place them in groups, this is where the group interface comes in. The group interface manages all security issues and handles all the cheking of rights of users within a group.

Now when a user does a request it has to go through the following procedure:



Is this a good security model or do I need to add some extra security chekking?

[Legend]

http://en.wikipedia.org/wiki/Role-based_access_control

Btw. it is checking, not chekking.

[matthias]

http://en.wikipedia.org/wiki/Role-based_access_control

Btw. it is checking, not chekking.

Thanks, I will chekk () it later