admin tool (roles, permissions, users)

hello, I'm currently working on a webinterface to manage roles, permissions and users. prototyp running on http://badefix.unibe.ch:8080 fell free to play around.... (you must login as user admin and click on link 'Admin') security features: - create, delete, modify roles (thy are appended to the current structure) - create and delete users, set passwords, add roles to a user. (users are appended to server) - if the admin gives the admin permissions to a user chief01, the chief01 can also create roles and users, but can ONLY give those permissions that he owns himself. - overview over all users - overview over all roles in all structures todo: - chief01 is still able to administrate to much... (e.g. manage (add/remove roles, change passwords) users, that somebody else created) - ability to collapse (open and close) the folders on the html page (javascript or server side (session handling)) structures features: - cut, copy, delete, paste structures (this is still experimental...) I' also want to add the zope-concept of beeing able to stop acquiring permissions from upper tree's objects (structures). therefore I need to add a new instance variable permissionStrips to class structure. thats where I want to store all the permissions that shouldn't be acquired. question to lukas l., what do you think. Is this ok and possible for you? another way would be to add a special role to the structure where I can store the permissions strips (this is probably a much better way...). question to alex b., I would like to integrate the first version of my tool on friday, but I'm away from 11 to 5 O'clock in the afternoon. do you have time on friday morning before 11, or do we start after 5? cheers and have a great day, david.