We are building a web-based application which contains a bunch of images and documents, and there is a requirement to be able to restrict what images/documents a particular user can see. (It's your basic user access control stuff.)
One idea for implementing this is to make use of the tagging sytem that already exists in the application, so when creating or editing a user you will see something like this:
I think this could be quite a flexible system but I am concerned that I haven't seens user permissions implemented in this way before. Does anyone know of any examples where a similar concept is used?
I found a study (http://dl.acm.org/citation.cfm?id=2207728) that tested a similar concept and had promising results but I have yet to find a real-world implementation.