I need to implement Access Control List (ACL) for my web application and I need to know common practice of using permissions in GIS systems. What levels of acces exists: layer, feature, attribute, extent, maybe anything else? What types of activities can be used by users: editing, browsing? Any response would be appreciated.
You can see the ESRI Strategy:
Esri, a provider of mission-critical geographic information system (GIS) software, recognizes the security and privacy challenges faced by many of its customers. Esri is committed to delivering GIS technology that can meet these challenges as part of a secure enterprise solution.