I have to write a node module for handling role-based access control. Users are stored in database, there are user groups, and there are system assets or functionality that users and groups can be given or denied access to.
I am considering the most appropriate terminology for these concepts:
- system asset/functionality = "right"?
- that a user is allowed to access certain asset/functionality = "permission"?