Robert Rawlins - Think Blue said: >> Can a user have more then one profile? Does every user have a >> profile? > > Each user will only have one profile (..)
>> Can a user have more than one set of credentials? Does every user >> have credentials? Is a user authenticated, or are credentials >> authenticated? > > Each user has one set of credentials assigned to them, the > credentials consist of a Username and Password. (..) Then I would not bother splitting up a user into a user, a profile and credentials. >> So a user always has one entitlement? > > That's correct, every user would have at least one entitlement. At least one, so they can have more. Yet it appears that your getEntitlements() method (plural) returns an object (singular) with an isEntitled() method. That is not consistent. You can either change your getEntitlements() method to return a collection of entitlements and for each entitlement you need to do an IsEntitled() call. If you only register positive or negative entitlements (user is allowed or user is not allowed) that should work fine and you can just return the first hit. If you register both (according to entitlement X he is allowed, but according to entitlement Y he is not) you need to have a conflict resolution mechanism. The other way, and the way I would choose, is to make all that stuff private and just expose an isEntitled() method directly on the user object. Jochem ~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~| ColdFusion MX7 and Flex 2 Build sales & marketing dashboard RIAâs for your business. Upgrade now http://www.adobe.com/products/coldfusion/flex2 Archive: http://www.houseoffusion.com/groups/CF-Talk/message.cfm/messageid:271857 Subscription: http://www.houseoffusion.com/groups/CF-Talk/subscribe.cfm Unsubscribe: http://www.houseoffusion.com/cf_lists/unsubscribe.cfm?user=11502.10531.4