I want to implement role-based access control for an iOS application I am currently working on. Access needs to be controlled to both the views as well as the actual data. For instance, I will display the same view with different buttons based on the role of the user. Similarly, I would like to protect other confidential information at the data level.
I figured there is no easy solution (read configuration files) to this, and need to implement this in the code itself. To secure access to views, it will be as grunt as hiding/showing different views based on the role. And to secure data, have the various access permissions as entity properties in the Core Data data model itself.
Is my conclusion right? Are there better ways of accomplishing the same? Thanks!