PHP Mechanism to allow granting access to an object/group of object to a user/group of user based on LDAP user directory.