application security for users

From: steve (me_at_me.com)
Date: 04/29/04 

Date: Fri, 30 Apr 2004 05:21:43 +0800

Hi,

Just thought i would pass this out for help.

I have an application that interfaces to a back end database, that contains
customer information.
most of the screens are fairly structured, but to prevent a "nested"
nightmare, some screens can provide multiple functions.

if i want to limit certain users to certain actions (add/delete/view), what
is the best most transparent way to do this.

is it to extend the button/menu class, to add a security check?

For example, when the user selects the button/menu, the name of the
button/menu & the user name are passed to validate the security, if no go
the routine swallows the event, if go , it passes the event thru?

just interested in how other people do it.

steve