Access Control for Large and multi level CakePHP System

I'm building a CakePHP Student Management System to be used by large Universities(50.000+ users), and i'm wondering what is the best way for implementing the Access Control Stuff.

The University has many faculties, the faculties as many departments and the departments as many sections and so on... The rule here is that the global administrators of the university has permission to access data from all faculties, but the administrators of faculties can only access data from their faculty. The same applies to departments under faculties.

Also, there will be teachers that can only access data from the students belonging to their "classrooms"

And there will be students that can only access their personal data and events belonging to their classrooms

Can you help me designing the access control strategy for this system? I'm already using CakePHP ACL, but i don't know if it is the good stratey to go.

--
Like Us on FaceBook https://www.facebook.com/CakePHP
Find us on Twitter http://twitter.com/CakePHP
 
---
You received this message because you are subscribed to the Google Groups "CakePHP" group.
To unsubscribe from this group and stop receiving emails from it, send an email to cake-php+unsubscribe@googlegroups.com.
To post to this group, send email to cake-php@googlegroups.com.
Visit this group at http://groups.google.com/group/cake-php?hl=en.
For more options, visit https://groups.google.com/groups/opt_out.