At present we use a user's "Security Profile" to control who has access to Pupil Manager module in iSAMS, and the level of access (read/write/full/etc.). When it comes to setting the granular permissions within Pupil Manager, this is done based on...