sfGuard

links:

pro/cons:

  • con: user-permission -> always use groups
  • users and group are not the same entity