[horde] using horde perms to build apps

[Alex Vorobiev]

> > 3.  finally, with object-level permissions generating lists of objects
can
> > get very expensive.  say, you are generating a list of 100s of tickets
for
> > display in whups.  do you check permissions on every ticket?  what do
you
> > think is the best way to scale that?
>
> This is what getCategoriesByAttributes() is for. It lets you very quickly
> (single SQL query) get back all objects (of a certain type, or whatever)
that a
> user has permissions to.

but doesn't that presume that every object has explicitly set permissions?
i can see a couple of ways this could happen:
1) one would have to manually set permissions for every object, or 2)
(default) permissions are set whenever a new object is created.

alternatively, an object can inherit permissions from its parent.

--sasha