Users and Groups with PHP Classes

[BahBah]

Hi,

 

I have setup what I hope to be a good working User class. Now I want to introduce group membership and group permissions. Before doing so, I have a couple of questions.

 

Firstly, because users and groups have a relationship would you say that a user inherits a group and therefore group code should be in the User class ? vice versa ? or is it commonly implemented differently ?

 

Secondly, and I am fairly sure I know the answer to this, but I'm guessing that groupID membership shouldn't be stored in the session right ? for security reasons ?

 

Thanks (and Happy Christmas)