user-group-administration
Installation
SKILL.md
Users, Groups and Roles
acl-security teaches the rules. This teaches the things the rules apply to. Without it an agent asked
to "add Sam to the change team" writes a background script against sys_user_grmember, which works
right up until it silently creates a second membership row.
Four tables
| Table | Holds |
|---|---|
sys_user |
people |
sys_user_group |
groups |
sys_user_grmember |
one row per (user, group) membership |
sys_user_has_role |
one row per (user, role) grant — direct and inherited |
There is no list of members on the group and no list of roles on the user. Both are join tables, and both are where the work happens.