I'm building a table of procedures, and I need to figure out a way so a 'logged in user' only has access to that procedure.
My initial thought is to store this information in a Certified column within the table like so 'JohnD', 'JasonD', 'JaneD'. Then I could only show that procedure if the user logged in is one of the usernames stored in the Certified column.
I gather users from an Active Directory, so I don't have a users table. I easily have access to their user name and full names etc.
The procedures table will have lots of procedures, then my KPI table could have many KPI's for each procedures. However I only want the person logged in to be able to view the KPI's he is certified for.
Am I going about this in a good way?