Easy database-driven authentication for ufront.  Each group is assigned permissions, and each user can belong to certain groups.