|
What you need is a flexible way to define and configure the necessary access control lists, coupled with a means to export and cache that information only when it's altered, so that the server can refer to the latest ACL without having to consult the database each time.
So instead of putting the images on a filesystem in something like /images/..., you need to put them on the filesystem somewhere like /images/acl_name/...
Now, this means that you may end up with multiple copies of a particular image living on the filesystem in different places, but that's what symlinks are for.
--
simon
|
