I have resources in an application. Further I have a table holding all resources and for every resource what role is allowed to access it. I also have defined a Table holding all uses that are registered to my system and the roles they are allowed to play.
My question now: Is this an ACL managed with roles (that could be also called groups)? Or is this a flat (core) Role Based Access Control? I do not really see the difference between these two.