I'm going to make an assumption, if the application uses a database, then there is absolutely nothing wrong with that approach. This plays well into security mo

I'm going to make an assumption, if the application uses a database, then there is absolutely nothing wrong with that approach. This plays well into security models as well enabling you to 'allow' certain users access to features.