I think I understand your frustration Jim, but I think it may be
misplaced.

I have watched this forum for a few months now, and I am just beginning
to get a grasp of your long-term architectural vision. You have
introduced bits of the architecture one at a time, and they have been
debated piecemeal until a resolution of sorts was reached.

I suggest that, without a full disclosure of your aims, you will
encocunter more roadblocks than assistance. You are getting into
features that are interdependent, and any part of the interdependent
features without the a grasp of the intent of the whole will not make
sense, hence the resistance.

Have you considered using LDAP or an LDAP like structure for
authorization?