> My internalized model of how this should work is AFS's ACL system (if that's
> not a dirty word...) and the associated PTS group system. Between them,
> they provide excellent ability to talk about users from remote cells and
> allow users to create and manage their own groups.


just use afs if that's what you want.

- erik