添加新权限时如何处理管理员/用户的用户权限？

Question

I am creating a website where all users have different types of permissions.

I am not doing role based permissions.

Users can join different groups and get different permissions for each group.

The part I am struggling with here is how to deal with the admin(group creator) permissions.

The admins permissions are a little different from regular users because admins always have access to every permission even when new permissions are added.

While users have to be given the permission by an admin., an admin can give all of their permissions to a user except editing the admins permissions.

I imagine I can have a table where there are UsersId , PermissionId , Type(Admin/User) , GroupID .

There will only be 1 admin per group. But the part that seems asinine to me is if we (the application) were to add another permission capability. We would have to query every UserID with type = Admin , and insert a record for that permission. That seems horribly inefficient. Is there a better way I can do this?

Answer 1

Create a AdminUserId column on your Group table.