authentication advice

[faust]

I'm building a cms and I need to create different user accounts (admin, client, super user etc.). I don't need code or anything just if someone can tell me if i'm thinking this the right way. I was thinking of creating 2 tables (ex. USERS and GROUPS). GROUPS will be only id, and group_title and USERS will be id, user, pass, group_id. On login or pages with sensitive info I would check if the user is in the right group. Am I going the right way? Thanks

[ejsexton82]

That sounds like it could work. Some people take it a step further and create a PRIVILEGES table linked to the GROUPS table. If you go that route, you would check if the user has the right privilege.