the concept of using the roles independently per user (as individual) means having all roles declared per module of the system in question for example CUSTOMER MANAGEMENT module will have its own ROLE declaration --> $_SESSION['ROLE_CM'] and so on and so forth; If access type is GROUP then all ROLES will depend on the declared role during registration else roless will be declared per module ; All ROLES will be set to VIEW by default;