"If we did it this way what value does the organization hierarcy have?"
Reporting. If it's no good for that either, then it does look like you need to review the decision made on the organisation definitions.
If you were going to secure by the cost code, I imagine you'd only need to do it based on 2 - 3 segments? In which case the performance hit might not be too bad. At BAA (other airports are available) we used to set up Absence Administrators using some quite complex custom security rules (Find the User's Assignment Organisation, find that in the Org Hierarchy and allow those to be seen for example) and found that performance was acceptable and a way of not having to have hundreds of different security profiles littering the system!
If your Security List Maintenance is cripplingly slow, it is worth deleting old and unused security profiles as these are still being processed - takes some effort to detach them from old responsibilities, but we did that at BAA and it was well worth the effort.
Edited by Geoff_Dixon (11/03/10 11:54 AM)
_________________________
Geoff
Expressing opinions since 1962