I like the idea of using Groups. This will make it alot easier to check privileges on the individual boards. Also it will make for a smaller privilege table. Instead of having to list every user that has permissions for each board, the group could be used.
An idea, that may add to the complexity but probably will add more flexibility. When creating or editing a board, there could be a couple of extra fields. Those being: allow read, allow write, deny read and deny write. This way you could go either way. If you have a few people that you want to give write access to you can put them in a group and then give them the allow write permission. Or if you have a few trouble users, you can put them in a group and assign them the deny write privilege.
Again, open for thoughts and suggestions. I would like to get the pretty much hashed out before I even start working on this.
---
Scream
http://www.wcsoft.net
