Diagram type for ACLs

[ibarski]

I am trying to plot a diagram for numerous ACLs - objects describing the access rights ( none/read/revision/catalog/write/delete ) for different
both real groups, roles and virtualities such as "world", "owner", "own group"

Which diagram type you think to be most suitable for it ?
I hope this question due to the "general board" would not be bounced as off-topic here.

Thank you in advance.

[thomaskilian]

What do you think of association classes?

[ibarski]

Association classes seem to be usefull for pair-binding situations, but in the ivolved case an ACL is a unlimited collection of pair bindings: "group" --(right)--> objects-to-access.

I would designate a diagram as  "most suitable" if it provided an direct and simple way to enumerate
-- objects, which a given group can access with different rights
-- groups, which can access a given object.

There is no problem to build a super complicated hard recognizable diagram, but I am hoping for a all-rounded elegant solution.

[«Midnight»]

What about giving the association class an attribute with a multiplicity of 0..*? This would be a collection of ACL entries or roles, as the case might be.

You could use a standard (for your chosen implementation language) collection, or design one elsewhere in the model.