[keth]

Do you know of more involved examples that use claim based authorization? So far I have only seen simple use cases that at most involve if a user works for a certain company, or that a user can only delete his own postings (userID == authorID), which I can easily handle with permissions. But I have not seen slightly more complex ones yet like the example in the OP or really complex ones. But will definetly look into it, the .net implementation seems fairly easy to understand (after skimming through some files).