I am currently designing a web-based control for managing users, groups, and roles. I was recently informed of PicketLink's future permission inheritance and was wondering how it will handle exclusions of permissions with a specific user. My plan is to define a default permission level using roles. A standard user will have a certain permission set through their role, but if desired, an admin should be able to grant or revoke an individual permission of that user. Will this be possible in the future?
