Users managing other users?

I've inherited an older CakePHP site(1.3) and it's not very complicated, so rather than update it I figured i'd start over from scratch with the latest version. A key feature I would like to add is the ability for accounts to manage other accounts. Basically a company account has many user accounts. Right now I have to manage every account/user for every company that uses the site and that gets a little tedious, despite the number of accounts not being very large. 

I was going to set it up so that each user had a role: admin, company/owner, basic, and make it so that users has many users. A user with the company role has many basic and can add/edit/delete their basic users(just not the roles) but can't see/effect any other users. Basic users can only see the basic site functionality and nothing user related. Users with the admin role would be me and my coworkers and can see/change any user account in the admin layout. It seems like I could make it work like this, and still easily use the authentication in cake, but that it would be slow and clunky.

Would this be the best way to do this? I've gone through the basic blog tutorial, and made a few minor changes while playing with it, but don't have extensive experience with cake.

Searching around it looks like ACL might be what I want, but the documentation wasn't clear to me. I would appreciate any advice.

--
Like Us on FaceBook https://www.facebook.com/CakePHP
Find us on Twitter http://twitter.com/CakePHP

---
You received this message because you are subscribed to the Google Groups "CakePHP" group.
To unsubscribe from this group and stop receiving emails from it, send an email to cake-php+unsubscribe@googlegroups.com.
To post to this group, send email to cake-php@googlegroups.com.
Visit this group at http://groups.google.com/group/cake-php.
For more options, visit https://groups.google.com/d/optout.