I am trying to come up with a UI for controlling Resource based Access Control Lists (RBAC) in web application.
So far I would go with this approach:
I have a Searchbox with suggestion support. Once a user/role is selected it will appear in the list. I can then check or uncheck the corresponding permissions.
Is there a better way to do this, or is my suggestion suitable?