Is it better to apply ACL only to parent entities?

[denis_]

Hi, I have a situation in which I have a hierarchical structure of entities:

Apartment > Floors > LeaseTerm (Apartment has many floors, floors have many lease terms).

I was wandering whether I should apply ACL to all these entities to perform easier checks for entity ownership, or should I just apply ACL ownership to the highest ranked entity (apartment) and then check the ownership of lower ranked entities through this entity? Would save me some code, I suppose - but I'm not sure whether this is a good idea.

I posted a similar question on Stack Overflow (http://stackoverflow.com/questions/9446 ... d-entities ) but got no response.

[dreipunktnull]

Hi,

if 'Apartment' is an aggregate root I think it's OK to apply ACL to the topmost entity but that depends on how the related entities are accessed.

Regards,
Bjoern