Permission based security

[gnjunge]

Hi, I'm setting up a system (both web based and app based) where there will be roles and permissions. There will be build in roles with specific permissions, but users can also create custom roles, with a certain subset of permissions. So the standard role based security framework doesn't work for me. Could somebody give some pointers of how to setup a role and permission based security framework? Thanks in advance, Gidon